Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 1487732 Details for
Bug 1630318
neutron-openvswitch-agent crashes on RHEL 7.6 Beta with SELinux enabled
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
audit.log gathered with permissive mode set
Bug1628679-1630318_audit.log (text/plain), 7.23 MB, created by
Zoli Caplovic
on 2018-09-27 11:15:36 UTC
(
hide
)
Description:
audit.log gathered with permissive mode set
Filename:
MIME Type:
Creator:
Zoli Caplovic
Created:
2018-09-27 11:15:36 UTC
Size:
7.23 MB
patch
obsolete
>type=DAEMON_START msg=audit(1538042879.832:8131): op=start ver=2.8.4 format=raw kernel=3.10.0-944.el7.x86_64 auid=4294967295 pid=1790 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=success >type=SERVICE_START msg=audit(1538042879.972:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042879.984:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CONFIG_CHANGE msg=audit(1538042879.987:7): audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1 >type=CONFIG_CHANGE msg=audit(1538042879.987:8): audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1 >type=SERVICE_START msg=audit(1538042879.990:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_BOOT msg=audit(1538042879.997:10): pid=1818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042880.001:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042880.039:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042880.071:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042880.129:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042880.164:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042880.172:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042880.178:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rhel-dmesg comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042880.275:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042880.282:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042880.325:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=polkit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042881.726:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042881.806:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042881.888:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042881.908:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042882.104:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042882.629:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042883.034:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042883.334:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=postfix comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538042887.333:29): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-group acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538042887.336:30): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user id=1000 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538042887.336:31): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="adm" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538042887.336:32): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="wheel" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538042887.336:33): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="systemd-journal" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538042887.336:34): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="adm" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538042887.336:35): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="wheel" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538042887.336:36): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="systemd-journal" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538042887.358:37): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-home-dir id=1000 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_CHAUTHTOK msg=audit(1538042887.389:38): pid=3936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=lock password id=1000 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042887.470:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042887.510:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042887.516:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538042887.516:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042887.521:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042887.526:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042887.530:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042887.546:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rhnsd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042887.670:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd-keygen comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042887.706:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042887.755:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538042888.137:50): pid=4051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=4051 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538042888.137:51): pid=4051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=4051 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538042888.137:52): pid=4051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4051 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538042888.147:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538042888.149:54): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd-keygen comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042888.165:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042888.206:56): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042888.977:57): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538042897.416:58): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538042902.069:59): pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11632 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538042902.069:60): pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11632 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538042902.069:61): pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11632 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538042902.071:62): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11632 suid=74 rport=58590 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.8.245.99 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538042902.071:63): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11632 suid=74 rport=58590 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.8.245.99 terminal=? res=success' >type=USER_AUTH msg=audit(1538042912.179:64): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58590 acct="cloud-user" exe="/usr/sbin/sshd" hostname=? addr=10.8.245.99 terminal=? res=success' >type=USER_AUTH msg=audit(1538042912.180:65): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:12:0f:47:87:44:bd:3f:f8:b2:83:78:82:22:13:b5:2c:f3:90:ad:fb:88:20:c5:a5:72:5c:61:2b:ca:82:21:4d rport=58590 acct="cloud-user" exe="/usr/sbin/sshd" hostname=? addr=10.8.245.99 terminal=? res=success' >type=USER_ACCT msg=audit(1538042912.190:66): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042912.191:67): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11632 suid=74 rport=58590 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.8.245.99 terminal=? res=success' >type=USER_AUTH msg=audit(1538042912.193:68): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="cloud-user" exe="/usr/sbin/sshd" hostname=? addr=10.8.245.99 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538042912.195:69): pid=11616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="cloud-user" exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=LOGIN msg=audit(1538042912.195:70): pid=11616 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1 >type=USER_ROLE_CHANGE msg=audit(1538042912.472:71): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042912.531:72): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="cloud-user" exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042912.533:73): pid=11823 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11823 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538042912.533:74): pid=11823 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11823 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538042912.533:75): pid=11823 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11823 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_ACQ msg=audit(1538042912.535:76): pid=11823 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="cloud-user" exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042912.579:77): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042912.580:78): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042912.582:79): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11824 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042912.620:80): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042912.620:81): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042912.634:82): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042912.634:83): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042912.635:84): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11832 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042912.664:85): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042912.664:86): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042912.679:87): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042912.679:88): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042912.680:89): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11844 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042912.715:90): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042912.716:91): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042912.728:92): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042912.728:93): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042912.729:94): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11851 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042912.746:95): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042912.746:96): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042912.761:97): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042912.761:98): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042912.763:99): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11860 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042913.088:100): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042913.088:101): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042913.335:102): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042913.335:103): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042913.337:104): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12203 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042913.356:105): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042913.356:106): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042913.366:107): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042913.366:108): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042913.368:109): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12230 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042913.389:110): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042913.389:111): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042913.402:112): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042913.403:113): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042913.404:114): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12263 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042913.438:115): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042913.438:116): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042913.449:117): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042913.450:118): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042913.451:119): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12296 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042913.471:120): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042913.472:121): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042913.484:122): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042913.484:123): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042913.486:124): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12324 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042913.537:125): pid=12356 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042913.537:126): pid=12356 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7974727A616166697A74656A707A746E666979707072737166796278676F673B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323931332E33342D3133363934333834353635323431312F6C696E65696E66696C652E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323931332E33342D3133363934333834353635323431312F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042913.538:127): pid=12356 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042913.539:128): pid=12356 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042913.703:129): pid=12356 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042913.703:130): pid=12356 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042913.707:131): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042913.707:132): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042913.852:133): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042913.852:134): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042913.854:135): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12548 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042913.877:136): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042913.877:137): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042913.887:138): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042913.887:139): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042913.889:140): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12577 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042913.915:141): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042913.915:142): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042913.928:143): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042913.929:144): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042913.930:145): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12618 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042913.965:146): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042913.965:147): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042913.976:148): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042913.977:149): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042913.978:150): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12653 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042914.002:151): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042914.002:152): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042914.016:153): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042914.016:154): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042914.017:155): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12684 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042914.064:156): pid=12716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042914.065:157): pid=12716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042914.065:158): pid=12716 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042914.065:159): pid=12716 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042914.332:160): pid=12716 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042914.332:161): pid=12716 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042914.336:162): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042914.336:163): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042914.487:164): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042914.487:165): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042914.489:166): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13003 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042914.512:167): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042914.512:168): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042914.524:169): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042914.524:170): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042914.530:171): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13015 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042914.559:172): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042914.559:173): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042914.572:174): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042914.573:175): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042914.574:176): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13051 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042914.611:177): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042914.611:178): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042914.624:179): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042914.624:180): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042914.625:181): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13095 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042914.650:182): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042914.650:183): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042914.663:184): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042914.663:185): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042914.665:186): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13104 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042914.715:187): pid=13117 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042914.715:188): pid=13117 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6A6670737A716B646B6D6F656B646D716D6F64716964737069736C6272747A3B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323931342E34392D3134353233353833383936383636362F73797374656D642E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323931342E34392D3134353233353833383936383636362F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042914.716:189): pid=13117 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042914.716:190): pid=13117 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538042914.963:191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538042915.013:192): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=4498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538042915.013:193): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=4498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538042915.013:194): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538042915.016:195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042915.035:196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042915.056:197): pid=13117 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042915.057:198): pid=13117 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042915.059:199): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042915.059:200): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1538042916.958:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538042920.013:202): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042920.013:203): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042920.015:204): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13132 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042920.033:205): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042920.033:206): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042920.043:207): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042920.044:208): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042920.045:209): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13140 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042920.066:210): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042920.066:211): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042920.082:212): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042920.082:213): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042920.084:214): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13152 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042920.117:215): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042920.117:216): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042920.131:217): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042920.131:218): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042920.133:219): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13159 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042920.151:220): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042920.151:221): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042920.167:222): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042920.167:223): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042920.169:224): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13168 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042920.584:225): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042920.584:226): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042921.324:227): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042921.324:228): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042921.326:229): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13210 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042921.339:230): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042921.339:231): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042921.351:232): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042921.351:233): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042921.353:234): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13218 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042921.368:235): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042921.369:236): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042921.476:237): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042921.477:238): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042921.478:239): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13230 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042921.501:240): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042921.502:241): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042921.513:242): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042921.513:243): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042921.514:244): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13237 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042921.530:245): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042921.530:246): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042921.543:247): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042921.543:248): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042921.544:249): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13246 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042921.581:250): pid=13259 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042921.581:251): pid=13259 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637569647562636B706278677374626766676B6D6675637A6C6E66656F7267763B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323932312E33332D38363638393731353235303938302F737461742E7079 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042921.581:252): pid=13259 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042921.582:253): pid=13259 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042921.679:254): pid=13259 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042921.680:255): pid=13259 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042921.684:256): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042921.684:257): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042921.700:258): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042921.701:259): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042921.702:260): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13265 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042921.723:261): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042921.723:262): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042921.735:263): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042921.735:264): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042921.737:265): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13272 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042921.754:266): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042921.754:267): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042921.862:268): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042921.862:269): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042921.863:270): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13281 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042921.889:271): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042921.889:272): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042921.901:273): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042921.901:274): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042921.902:275): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13288 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042921.924:276): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042921.924:277): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042921.936:278): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042921.936:279): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042921.937:280): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13297 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042921.974:281): pid=13310 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042921.975:282): pid=13310 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042921.975:283): pid=13310 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042921.975:284): pid=13310 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042922.207:285): pid=13310 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042922.207:286): pid=13310 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042922.211:287): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042922.211:288): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042922.305:289): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042922.305:290): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042922.307:291): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13317 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042922.325:292): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042922.325:293): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042922.337:294): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042922.337:295): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042922.338:296): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13325 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042922.359:297): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042922.359:298): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042922.376:299): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042922.376:300): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042922.377:301): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13337 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042922.405:302): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042922.405:303): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042922.417:304): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042922.417:305): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042922.419:306): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13344 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042922.437:307): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042922.437:308): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042922.450:309): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042922.450:310): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042922.451:311): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13353 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042922.483:312): pid=13366 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042922.483:313): pid=13366 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6D6677706279767475686978616D62757377656576766E7966686B636D62783B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323932322E33312D3237393735343931313833333737302F737461742E7079 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042922.483:314): pid=13366 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042922.484:315): pid=13366 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042922.767:316): pid=13366 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042922.767:317): pid=13366 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042922.770:318): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042922.770:319): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042922.786:320): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042922.786:321): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042922.787:322): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13372 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042922.813:323): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042922.813:324): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042922.825:325): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042922.825:326): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042922.826:327): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13379 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042922.849:328): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042922.849:329): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042922.864:330): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042922.864:331): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042922.865:332): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13388 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042922.897:333): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042922.897:334): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042922.908:335): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042922.908:336): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042922.909:337): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13395 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042922.927:338): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042922.927:339): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042922.940:340): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042922.941:341): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042922.942:342): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13404 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042922.987:343): pid=13417 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042922.987:344): pid=13417 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042922.987:345): pid=13417 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042922.988:346): pid=13417 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042923.291:347): pid=13417 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042923.291:348): pid=13417 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042923.295:349): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042923.295:350): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042923.483:351): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042923.483:352): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042923.484:353): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13424 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042923.504:354): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042923.504:355): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042923.515:356): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042923.515:357): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042923.516:358): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13432 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042923.540:359): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042923.540:360): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042923.554:361): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042923.554:362): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042923.555:363): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13444 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042923.584:364): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042923.584:365): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042923.597:366): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042923.597:367): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042923.597:368): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13451 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042923.619:369): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042923.619:370): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042923.632:371): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042923.632:372): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042923.633:373): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13460 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042923.664:374): pid=13473 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042923.665:375): pid=13473 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6478717070766F66656C676C667578686F726E6B6E6A6B706367796B6C70797A3B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323932332E34392D3236393633383331363834383239302F636F6D6D616E642E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323932332E34392D3236393633383331363834383239302F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042923.665:376): pid=13473 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042923.665:377): pid=13473 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042928.384:378): pid=13473 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042928.384:379): pid=13473 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042928.387:380): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042928.387:381): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042928.453:382): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042928.454:383): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042928.455:384): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13627 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042928.475:385): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042928.475:386): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042928.484:387): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042928.485:388): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042928.486:389): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13635 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042928.511:390): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042928.511:391): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042928.524:392): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042928.524:393): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042928.526:394): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13647 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042928.559:395): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042928.559:396): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042928.570:397): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042928.570:398): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042928.571:399): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13654 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042928.595:400): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042928.595:401): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042928.607:402): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042928.607:403): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042928.609:404): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13663 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042928.639:405): pid=13676 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042928.639:406): pid=13676 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042928.640:407): pid=13676 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042928.640:408): pid=13676 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042933.193:409): pid=13676 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042933.193:410): pid=13676 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042933.197:411): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042933.197:412): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042940.895:413): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042940.895:414): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042940.896:415): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13830 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042940.909:416): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042940.909:417): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042940.920:418): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042940.920:419): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042940.921:420): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13838 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042940.936:421): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042940.936:422): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042940.949:423): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042940.949:424): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042940.950:425): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13850 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042940.982:426): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042940.982:427): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042940.993:428): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042940.993:429): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042940.994:430): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13857 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042941.009:431): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042941.009:432): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042941.020:433): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042941.020:434): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042941.021:435): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13866 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042941.049:436): pid=13879 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042941.049:437): pid=13879 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042941.049:438): pid=13879 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042941.049:439): pid=13879 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042941.281:440): pid=13879 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042941.281:441): pid=13879 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042941.283:442): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042941.283:443): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042941.693:444): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042941.693:445): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042941.694:446): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13911 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042941.707:447): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042941.707:448): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042941.718:449): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042941.718:450): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042941.718:451): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13919 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042941.734:452): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042941.734:453): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042941.749:454): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042941.749:455): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042941.750:456): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13931 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042941.781:457): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042941.781:458): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042941.793:459): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042941.793:460): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042941.794:461): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13938 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042941.807:462): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042941.807:463): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042941.821:464): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042941.821:465): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042941.821:466): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13947 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042941.847:467): pid=13960 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042941.847:468): pid=13960 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042941.848:469): pid=13960 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042941.848:470): pid=13960 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538042942.303:471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042942.428:472): pid=13960 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042942.428:473): pid=13960 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042942.431:474): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042942.431:475): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042942.513:476): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042942.513:477): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042942.515:478): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13974 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042942.528:479): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042942.528:480): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042942.539:481): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042942.539:482): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042942.539:483): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13982 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042942.556:484): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042942.556:485): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042942.570:486): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042942.570:487): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042942.571:488): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13994 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042942.601:489): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042942.601:490): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042942.612:491): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042942.612:492): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042942.613:493): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14001 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042942.627:494): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042942.627:495): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042942.640:496): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042942.640:497): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042942.641:498): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14010 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042942.669:499): pid=14023 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042942.670:500): pid=14023 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042942.670:501): pid=14023 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042942.671:502): pid=14023 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042942.908:503): pid=14023 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042942.908:504): pid=14023 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042942.911:505): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042942.911:506): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042943.201:507): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042943.201:508): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042943.202:509): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14055 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042943.215:510): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042943.215:511): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042943.226:512): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042943.226:513): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042943.227:514): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14063 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042943.243:515): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042943.244:516): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042943.259:517): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042943.259:518): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042943.260:519): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14075 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042943.284:520): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042943.284:521): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042943.296:522): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042943.297:523): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042943.297:524): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14082 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042943.312:525): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042943.312:526): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042943.323:527): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042943.323:528): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042943.324:529): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14091 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042943.351:530): pid=14104 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042943.352:531): pid=14104 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042943.352:532): pid=14104 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042943.352:533): pid=14104 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042943.457:534): pid=14104 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042943.457:535): pid=14104 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042943.461:536): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042943.461:537): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042943.708:538): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042943.708:539): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042943.710:540): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14111 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042943.722:541): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042943.722:542): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042943.732:543): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042943.732:544): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042943.733:545): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14119 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042943.750:546): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042943.750:547): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042943.763:548): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042943.763:549): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042943.764:550): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14131 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042943.789:551): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042943.789:552): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042943.799:553): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042943.799:554): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042943.800:555): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14138 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042943.815:556): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042943.815:557): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042943.827:558): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042943.827:559): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042943.829:560): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14147 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042943.858:561): pid=14160 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042943.858:562): pid=14160 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D616B76746C6A6D6E7A6C6D63796771716E7A7A7276636F756E756F6579646D3B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323934332E37312D3232323031393039323638393530332F73797374656D642E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323934332E37312D3232323031393039323638393530332F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042943.859:563): pid=14160 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042943.859:564): pid=14160 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1538042943.998:565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042944.046:566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042944.060:567): pid=14160 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042944.060:568): pid=14160 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042944.064:569): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042944.064:570): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042944.724:571): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042944.724:572): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042944.725:573): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14173 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042944.738:574): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042944.739:575): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042944.751:576): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042944.751:577): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042944.752:578): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14181 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042944.772:579): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042944.772:580): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042944.785:581): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042944.785:582): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042944.787:583): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14193 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042944.816:584): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042944.816:585): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042944.827:586): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042944.828:587): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042944.829:588): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14200 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042944.842:589): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042944.843:590): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042944.855:591): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042944.855:592): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042944.857:593): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14209 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042944.889:594): pid=14222 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042944.889:595): pid=14222 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042944.889:596): pid=14222 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042944.890:597): pid=14222 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042958.276:598): pid=14222 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042958.277:599): pid=14222 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042958.281:600): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042958.281:601): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042958.566:602): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042958.566:603): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042958.568:604): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14233 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042958.583:605): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042958.583:606): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042958.594:607): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042958.594:608): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042958.595:609): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14241 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042958.613:610): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042958.614:611): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042958.626:612): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042958.626:613): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042958.627:614): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14253 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042958.655:615): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042958.655:616): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042958.666:617): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042958.666:618): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042958.667:619): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14260 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042958.685:620): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042958.685:621): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042958.696:622): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042958.696:623): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042958.697:624): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14269 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042958.735:625): pid=14282 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042958.735:626): pid=14282 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042958.736:627): pid=14282 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042958.736:628): pid=14282 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042959.002:629): pid=14282 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042959.002:630): pid=14282 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042959.005:631): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042959.005:632): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042959.170:633): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042959.170:634): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042959.172:635): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14294 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042959.189:636): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042959.189:637): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042959.199:638): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042959.199:639): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042959.201:640): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14302 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042959.223:641): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042959.223:642): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042959.236:643): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042959.236:644): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042959.238:645): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14314 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042959.263:646): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042959.263:647): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042959.274:648): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042959.274:649): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042959.276:650): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14321 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042959.294:651): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042959.294:652): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042959.306:653): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042959.306:654): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042959.307:655): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14330 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042959.339:656): pid=14343 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042959.339:657): pid=14343 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042959.339:658): pid=14343 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042959.339:659): pid=14343 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042959.437:660): pid=14343 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042959.437:661): pid=14343 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042959.440:662): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042959.440:663): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042959.522:664): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042959.523:665): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042959.524:666): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14350 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042959.538:667): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042959.538:668): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042959.550:669): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042959.550:670): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042959.551:671): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14358 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042961.029:672): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042961.029:673): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042961.042:674): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042961.042:675): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042961.043:676): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14370 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042961.069:677): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042961.069:678): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042961.081:679): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042961.081:680): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042961.082:681): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14377 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042961.098:682): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042961.098:683): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042961.110:684): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042961.110:685): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042961.111:686): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14386 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042961.149:687): pid=14399 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042961.150:688): pid=14399 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042961.150:689): pid=14399 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042961.150:690): pid=14399 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=MAC_STATUS msg=audit(1538042961.286:691): enforcing=0 old_enforcing=1 auid=1000 ses=1 >type=SYSCALL msg=audit(1538042961.286:691): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd922c8e30 a2=1 a3=7ffd922c88a0 items=0 ppid=14403 pid=14404 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538042961.286:691): proctitle=736574656E666F7263650030 >type=USER_AVC msg=audit(1538042961.290:692): pid=2252 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received setenforce notice (enforcing=0) exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' >type=USER_END msg=audit(1538042961.304:693): pid=14399 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042961.304:694): pid=14399 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042961.307:695): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042961.307:696): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042961.577:697): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042961.577:698): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042961.578:699): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14407 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042961.598:700): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042961.598:701): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042961.610:702): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042961.611:703): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042961.612:704): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14415 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042961.631:705): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042961.631:706): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042961.645:707): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042961.645:708): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042961.646:709): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14427 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042961.670:710): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042961.670:711): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042961.683:712): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042961.683:713): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042961.684:714): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14434 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042961.698:715): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042961.698:716): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042961.711:717): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042961.711:718): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042961.712:719): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14443 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042961.740:720): pid=14456 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042961.740:721): pid=14456 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042961.741:722): pid=14456 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042961.742:723): pid=14456 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042961.971:724): pid=14456 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042961.971:725): pid=14456 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042961.974:726): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042961.974:727): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042962.063:728): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042962.064:729): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042962.064:730): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14467 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042962.084:731): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042962.084:732): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042962.095:733): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042962.095:734): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042962.095:735): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14475 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042962.116:736): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042962.116:737): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042962.129:738): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042962.130:739): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042962.131:740): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14487 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042962.168:741): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042962.168:742): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042962.181:743): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042962.181:744): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042962.183:745): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14494 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042962.206:746): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042962.206:747): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042962.220:748): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042962.220:749): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042962.221:750): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14503 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042962.263:751): pid=14516 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042962.264:752): pid=14516 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042962.264:753): pid=14516 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042962.264:754): pid=14516 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042962.530:755): pid=14516 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042962.530:756): pid=14516 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042962.533:757): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042962.533:758): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042962.631:759): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042962.631:760): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042962.633:761): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14548 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042962.649:762): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042962.649:763): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042962.661:764): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042962.661:765): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042962.662:766): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14556 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042962.685:767): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042962.685:768): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042962.700:769): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042962.700:770): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042962.702:771): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14568 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042962.733:772): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042962.733:773): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042962.746:774): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042962.746:775): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042962.748:776): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14575 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042962.769:777): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042962.769:778): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042962.782:779): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042962.782:780): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042962.783:781): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14584 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042962.814:782): pid=14597 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042962.814:783): pid=14597 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042962.814:784): pid=14597 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042962.815:785): pid=14597 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042963.112:786): pid=14597 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042963.112:787): pid=14597 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042963.115:788): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042963.115:789): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042963.207:790): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042963.207:791): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042963.209:792): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14604 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042963.226:793): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042963.227:794): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042963.238:795): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042963.238:796): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042963.239:797): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14612 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042963.255:798): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042963.255:799): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042963.267:800): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042963.267:801): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042963.268:802): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14620 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042963.287:803): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042963.287:804): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042963.457:805): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042963.457:806): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042963.458:807): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14632 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042963.487:808): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042963.487:809): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042963.499:810): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042963.499:811): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042963.500:812): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14639 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042963.519:813): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042963.519:814): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042963.532:815): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042963.532:816): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042963.533:817): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14648 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042963.568:818): pid=14661 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042963.568:819): pid=14661 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7969686F616869637172687466656463766A69667264756C717866706B79756C3B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323936332E32342D3234383136303836303032393634302F737461742E7079 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042963.568:820): pid=14661 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042963.568:821): pid=14661 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042963.854:822): pid=14661 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042963.854:823): pid=14661 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042963.857:824): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042963.857:825): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042963.872:826): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042963.872:827): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042963.873:828): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14667 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042963.898:829): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042963.898:830): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042963.910:831): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042963.910:832): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042963.912:833): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14674 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042963.926:834): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042963.926:835): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042964.036:836): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042964.037:837): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042964.038:838): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14683 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042964.064:839): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042964.064:840): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042964.076:841): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042964.076:842): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042964.077:843): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14690 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042964.092:844): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042964.092:845): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042964.103:846): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042964.103:847): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042964.104:848): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14699 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042964.142:849): pid=14712 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042964.143:850): pid=14712 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D62746163756175687065626C78736C66766365626776717A6B6469637372773B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323936332E32342D3234383136303836303032393634302F636F70792E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323936332E32342D3234383136303836303032393634302F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042964.143:851): pid=14712 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042964.143:852): pid=14712 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042964.393:853): pid=14712 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042964.393:854): pid=14712 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042964.397:855): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042964.397:856): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042964.483:857): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042964.483:858): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042964.484:859): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14719 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042964.507:860): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042964.507:861): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042964.518:862): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042964.518:863): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042964.519:864): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14727 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042964.543:865): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042964.543:866): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042964.559:867): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042964.559:868): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042964.560:869): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14739 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042964.590:870): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042964.590:871): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042964.601:872): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042964.601:873): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042964.601:874): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14746 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042964.616:875): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042964.616:876): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042964.627:877): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042964.627:878): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042964.628:879): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14755 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042964.659:880): pid=14768 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042964.659:881): pid=14768 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042964.660:882): pid=14768 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042964.660:883): pid=14768 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042965.167:884): pid=14768 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042965.167:885): pid=14768 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042965.171:886): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042965.171:887): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042965.583:888): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042965.583:889): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042965.584:890): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14779 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042965.603:891): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042965.604:892): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042965.614:893): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042965.615:894): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042965.616:895): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14787 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042965.632:896): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042965.632:897): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042965.647:898): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042965.647:899): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042965.649:900): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14799 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042965.682:901): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042965.682:902): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042965.694:903): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042965.694:904): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042965.695:905): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14806 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042965.710:906): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042965.710:907): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042965.721:908): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042965.721:909): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042965.722:910): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14815 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042965.758:911): pid=14828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042965.758:912): pid=14828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042965.758:913): pid=14828 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042965.758:914): pid=14828 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042965.909:915): pid=14828 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042965.909:916): pid=14828 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042965.912:917): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042965.912:918): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042966.163:919): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042966.163:920): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042966.164:921): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14835 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042966.176:922): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042966.176:923): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042966.188:924): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042966.188:925): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042966.189:926): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14843 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042966.211:927): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042966.212:928): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042966.225:929): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042966.226:930): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042966.226:931): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14855 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042966.252:932): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042966.252:933): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042966.263:934): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042966.263:935): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042966.264:936): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14862 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042966.281:937): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042966.281:938): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042966.293:939): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042966.294:940): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042966.294:941): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14871 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042966.322:942): pid=14884 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042966.322:943): pid=14884 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656D616E6F736B666F6E766C6B6668757377686B63766F6269796977766F69633B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323936362E31372D3138353231393133313435303436312F66696C652E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323936362E31372D3138353231393133313435303436312F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042966.322:944): pid=14884 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042966.322:945): pid=14884 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042966.545:946): pid=14884 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042966.545:947): pid=14884 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042966.548:948): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042966.548:949): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042966.636:950): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042966.636:951): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042966.642:952): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14891 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042966.663:953): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042966.663:954): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042966.675:955): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042966.676:956): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042966.678:957): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14899 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042966.696:958): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042966.696:959): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042966.710:960): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042966.710:961): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042966.711:962): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14911 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042966.741:963): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042966.741:964): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042966.754:965): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042966.754:966): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042966.755:967): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14918 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042966.773:968): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042966.773:969): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042966.785:970): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042966.785:971): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042966.786:972): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14927 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042966.832:973): pid=14940 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042966.832:974): pid=14940 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042966.833:975): pid=14940 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042966.833:976): pid=14940 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042967.551:977): pid=14940 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042967.551:978): pid=14940 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042967.555:979): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042967.555:980): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042967.820:981): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042967.820:982): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042967.822:983): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14950 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042967.843:984): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042967.843:985): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042967.855:986): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042967.855:987): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042967.856:988): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14958 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042967.879:989): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042967.879:990): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042967.894:991): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042967.894:992): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042967.896:993): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14970 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042967.927:994): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042967.927:995): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042967.939:996): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042967.939:997): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042967.941:998): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14977 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042967.956:999): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042967.956:1000): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042967.970:1001): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042967.970:1002): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042967.971:1003): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14986 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042968.011:1004): pid=14999 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042968.011:1005): pid=14999 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042968.012:1006): pid=14999 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042968.012:1007): pid=14999 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042968.828:1008): pid=14999 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042968.829:1009): pid=14999 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042968.832:1010): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042968.832:1011): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042969.146:1012): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042969.146:1013): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042969.148:1014): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15010 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042969.168:1015): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042969.169:1016): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042969.180:1017): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042969.180:1018): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042969.181:1019): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15018 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042969.208:1020): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042969.208:1021): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042969.221:1022): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042969.221:1023): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042969.223:1024): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15030 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042969.255:1025): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042969.256:1026): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042969.267:1027): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042969.267:1028): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042969.268:1029): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15037 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042969.290:1030): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042969.290:1031): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042969.301:1032): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042969.302:1033): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042969.302:1034): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15046 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042969.348:1035): pid=15059 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042969.348:1036): pid=15059 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042969.349:1037): pid=15059 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042969.349:1038): pid=15059 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538042969.597:1039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovirt-guest-agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AVC msg=audit(1538042969.603:1040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received setenforce notice (enforcing=0) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SYSTEM_RUNLEVEL msg=audit(1538042969.603:1041): pid=15086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538042969.604:1042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538042969.604:1043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538042969.812:1044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovirt-guest-agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538042972.096:1045): pid=15097 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rhos-release-1.2.50-1.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042972.214:1046): pid=15059 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042972.214:1047): pid=15059 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042972.218:1048): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042972.218:1049): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042972.449:1050): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042972.449:1051): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042972.450:1052): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15104 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042972.473:1053): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042972.473:1054): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042972.484:1055): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042972.484:1056): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042972.485:1057): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15112 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042972.510:1058): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042972.510:1059): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042972.526:1060): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042972.526:1061): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042972.527:1062): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15124 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042972.560:1063): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042972.560:1064): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042972.571:1065): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042972.571:1066): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042972.572:1067): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15131 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042972.594:1068): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042972.594:1069): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042972.606:1070): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042972.606:1071): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042972.608:1072): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15140 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042972.636:1073): pid=15153 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042972.636:1074): pid=15153 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042972.636:1075): pid=15153 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042972.636:1076): pid=15153 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042973.248:1077): pid=15153 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042973.248:1078): pid=15153 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042973.251:1079): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042973.251:1080): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042973.356:1081): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042973.356:1082): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042973.358:1083): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15177 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042973.378:1084): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042973.378:1085): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042973.389:1086): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042973.389:1087): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042973.390:1088): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15185 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042973.409:1089): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042973.409:1090): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042973.422:1091): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042973.422:1092): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042973.423:1093): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15197 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042973.449:1094): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042973.449:1095): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042973.461:1096): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042973.461:1097): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042973.462:1098): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15204 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042973.481:1099): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042973.481:1100): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042973.493:1101): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042973.493:1102): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042973.494:1103): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15213 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042973.532:1104): pid=15226 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042973.533:1105): pid=15226 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042973.533:1106): pid=15226 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042973.534:1107): pid=15226 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1538042974.086:1108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538042981.737:1109): pid=15244 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="wget-1.14-18.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042982.093:1110): pid=15226 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042982.093:1111): pid=15226 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042982.097:1112): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042982.098:1113): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042982.287:1114): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042982.287:1115): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042982.289:1116): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15295 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042982.304:1117): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042982.304:1118): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042982.315:1119): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042982.315:1120): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042982.316:1121): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15303 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042982.330:1122): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042982.330:1123): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042982.342:1124): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042982.343:1125): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042982.344:1126): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15311 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042982.360:1127): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042982.360:1128): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042982.376:1129): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042982.376:1130): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042982.377:1131): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15323 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042982.401:1132): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042982.401:1133): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042982.413:1134): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042982.413:1135): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042982.414:1136): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15330 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042982.432:1137): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042982.432:1138): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042982.447:1139): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042982.447:1140): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042982.448:1141): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15339 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042982.621:1142): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042982.621:1143): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042982.634:1144): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042982.634:1145): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042982.635:1146): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15355 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042982.663:1147): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042982.663:1148): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042982.674:1149): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042982.674:1150): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042982.675:1151): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15362 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042982.697:1152): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042982.697:1153): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042982.711:1154): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042982.712:1155): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042982.712:1156): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15371 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042982.746:1157): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042982.747:1158): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042982.757:1159): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042982.758:1160): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042982.759:1161): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15378 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042982.780:1162): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042982.780:1163): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042982.791:1164): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042982.792:1165): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042982.793:1166): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15387 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042983.115:1167): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042983.115:1168): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042983.264:1169): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042983.264:1170): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042983.266:1171): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15404 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042983.282:1172): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042983.283:1173): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042983.294:1174): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042983.294:1175): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042983.295:1176): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15412 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042983.312:1177): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042983.312:1178): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042983.323:1179): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042983.323:1180): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042983.325:1181): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15420 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042983.345:1182): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042983.345:1183): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042983.361:1184): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042983.361:1185): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042983.363:1186): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15432 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042983.393:1187): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042983.394:1188): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042983.405:1189): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042983.405:1190): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042983.406:1191): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15439 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042983.425:1192): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042983.425:1193): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042983.438:1194): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042983.438:1195): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042983.440:1196): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15448 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042983.467:1197): pid=15461 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042983.467:1198): pid=15461 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6C636668757065706B6D677879756D797176776F656E78656E71796A6971683B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323938332E332D35383635363933373737323334322F737461742E7079 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042983.467:1199): pid=15461 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042983.467:1200): pid=15461 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042983.563:1201): pid=15461 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042983.563:1202): pid=15461 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042983.566:1203): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042983.566:1204): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042983.579:1205): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042983.579:1206): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042983.581:1207): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15467 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042983.599:1208): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042983.599:1209): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042983.610:1210): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042983.610:1211): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042983.611:1212): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15474 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042983.627:1213): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042983.627:1214): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042983.642:1215): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042983.642:1216): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042983.643:1217): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15483 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042983.667:1218): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042983.668:1219): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042983.679:1220): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042983.679:1221): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042983.680:1222): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15490 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042983.696:1223): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042983.696:1224): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042983.708:1225): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042983.708:1226): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042983.709:1227): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15499 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042983.746:1228): pid=15512 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042983.746:1229): pid=15512 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042983.747:1230): pid=15512 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042983.747:1231): pid=15512 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042983.900:1232): pid=15512 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042983.900:1233): pid=15512 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042983.904:1234): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042983.904:1235): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042983.990:1236): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042983.990:1237): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042983.991:1238): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15519 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042984.012:1239): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042984.012:1240): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042984.022:1241): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042984.022:1242): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042984.024:1243): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15527 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042984.049:1244): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042984.049:1245): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042984.062:1246): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042984.062:1247): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042984.063:1248): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15539 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042984.091:1249): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042984.091:1250): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042984.103:1251): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042984.103:1252): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042984.104:1253): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15546 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042984.121:1254): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042984.121:1255): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042984.133:1256): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042984.133:1257): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042984.135:1258): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15555 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042984.177:1259): pid=15568 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042984.177:1260): pid=15568 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042984.177:1261): pid=15568 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042984.178:1262): pid=15568 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042984.321:1263): pid=15568 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042984.321:1264): pid=15568 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042984.323:1265): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042984.324:1266): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042984.412:1267): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042984.413:1268): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042984.414:1269): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15588 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042984.427:1270): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042984.428:1271): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042984.438:1272): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042984.438:1273): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042984.439:1274): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15596 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042984.461:1275): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042984.461:1276): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042984.473:1277): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042984.473:1278): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042984.475:1279): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15608 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042984.506:1280): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042984.506:1281): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042984.519:1282): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042984.520:1283): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042984.521:1284): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15615 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042984.535:1285): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042984.535:1286): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042984.547:1287): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042984.547:1288): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042984.548:1289): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15624 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042984.576:1290): pid=15637 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042984.576:1291): pid=15637 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042984.577:1292): pid=15637 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042984.577:1293): pid=15637 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042985.288:1294): pid=15637 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042985.288:1295): pid=15637 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042985.291:1296): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042985.291:1297): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042985.373:1298): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042985.373:1299): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042985.375:1300): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15649 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042985.393:1301): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042985.393:1302): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042985.404:1303): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042985.404:1304): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042985.405:1305): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15657 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042985.425:1306): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042985.425:1307): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042985.439:1308): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042985.439:1309): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042985.440:1310): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15669 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042985.475:1311): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042985.475:1312): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042985.486:1313): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042985.486:1314): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042985.487:1315): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15676 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042985.503:1316): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042985.503:1317): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042985.517:1318): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042985.517:1319): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042985.518:1320): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15685 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042985.558:1321): pid=15698 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042985.558:1322): pid=15698 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042985.558:1323): pid=15698 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042985.559:1324): pid=15698 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042986.893:1325): pid=15698 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042986.893:1326): pid=15698 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042986.896:1327): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042986.896:1328): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042986.981:1329): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042986.981:1330): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042986.982:1331): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15714 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042987.000:1332): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042987.000:1333): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042987.013:1334): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042987.013:1335): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042987.014:1336): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15722 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042987.040:1337): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042987.040:1338): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042987.054:1339): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042987.054:1340): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042987.055:1341): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15734 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042987.086:1342): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042987.087:1343): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042987.100:1344): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042987.100:1345): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042987.101:1346): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15741 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042987.122:1347): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042987.122:1348): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042987.134:1349): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042987.134:1350): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042987.135:1351): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15750 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042987.184:1352): pid=15763 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042987.185:1353): pid=15763 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C616A6B7478706E7465776E766A666D77687365717666636B6363636B676A3B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323938362E39382D3234373130373839383339373736312F636F6D6D616E642E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034323938362E39382D3234373130373839383339373736312F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042987.185:1354): pid=15763 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042987.186:1355): pid=15763 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042994.207:1356): pid=15763 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042994.207:1357): pid=15763 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042994.209:1358): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042994.210:1359): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042994.298:1360): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042994.298:1361): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042994.299:1362): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15800 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042994.312:1363): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042994.312:1364): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042994.324:1365): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042994.324:1366): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042994.325:1367): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15808 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042994.348:1368): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042994.349:1369): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042994.361:1370): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042994.362:1371): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042994.362:1372): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15820 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042994.392:1373): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042994.392:1374): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042994.405:1375): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042994.405:1376): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042994.407:1377): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15827 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042994.427:1378): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042994.427:1379): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042994.439:1380): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042994.440:1381): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042994.441:1382): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15836 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042994.481:1383): pid=15849 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042994.481:1384): pid=15849 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042994.482:1385): pid=15849 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042994.482:1386): pid=15849 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042995.092:1387): pid=15849 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538042995.092:1388): pid=15849 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538042995.096:1389): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538042995.096:1390): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538042995.179:1391): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042995.179:1392): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042995.180:1393): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15862 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042995.198:1394): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042995.198:1395): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042995.209:1396): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042995.209:1397): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042995.210:1398): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15870 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042995.232:1399): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042995.233:1400): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042995.246:1401): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042995.246:1402): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042995.247:1403): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15882 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042995.284:1404): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042995.284:1405): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042995.295:1406): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538042995.295:1407): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538042995.296:1408): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15889 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538042995.320:1409): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538042995.320:1410): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538042995.334:1411): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042995.335:1412): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538042995.336:1413): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15898 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538042995.368:1414): pid=15911 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538042995.368:1415): pid=15911 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538042995.369:1416): pid=15911 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538042995.369:1417): pid=15911 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SOFTWARE_UPDATE msg=audit(1538043016.088:1418): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-libs-2.7.5-76.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043016.105:1419): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-2.7.5-76.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043016.121:1420): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-six-1.10.0-9.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043016.205:1421): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="systemd-libs-219-62.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043016.382:1422): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="grub2-common-1:2.02-0.76.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043016.457:1423): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-idna-2.5-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043016.523:1424): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libsemanage-2.5-14.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043016.829:1425): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="policycoreutils-2.5-29.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043016.886:1426): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-dateutil-1:2.6.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043017.197:1427): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rhn-client-tools-2.0.2-24.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043017.218:1428): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="redhat-release-server-7.6-4.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043017.291:1429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043018.656:1430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043019.094:1431): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="systemd-219-62.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043019.150:1432): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="device-mapper-libs-7:1.02.149-8.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043019.199:1433): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="device-mapper-7:1.02.149-8.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043019.230:1434): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="grub2-tools-minimal-1:2.02-0.76.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043019.559:1435): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="grub2-tools-1:2.02-0.76.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043019.738:1436): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="grub2-tools-extra-1:2.02-0.76.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043031.486:1437): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="selinux-policy-3.13.1-228.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043031.509:1438): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libsemanage-python-2.5-14.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043031.745:1439): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="grub2-pc-modules-1:2.02-0.76.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043031.752:1440): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="grub2-pc-1:2.02-0.76.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043031.775:1441): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-markupsafe-0.23-16.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043031.788:1442): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-jsonpointer-1.10-4.1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043031.853:1443): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-asn1crypto-0.23.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043031.877:1444): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="pytz-2016.10-2.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043032.856:1445): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-babel-2.3.4-1.1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043032.908:1446): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-ply-3.4-11.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043032.951:1447): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-pycparser-2.14-1.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043033.014:1448): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-cffi-1.11.2-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043033.080:1449): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-perf-3.10.0-954.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043033.090:1450): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-pysocks-1.5.6-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043033.174:1451): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-psutil-5.2.2-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043033.193:1452): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-enum34-1.0.4-1.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043033.405:1453): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-cryptography-2.1.4-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043033.437:1454): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-pyOpenSSL-17.3.0-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043033.515:1455): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-urllib3-1.21.1-1.2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043033.653:1456): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="nss-3.36.0-7.el7_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043033.666:1457): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="nss-sysinit-3.36.0-7.el7_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043033.916:1458): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="NetworkManager-libnm-1:1.12.0-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043034.221:1459): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="NetworkManager-1:1.12.0-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043041.621:1460): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="linux-firmware-20180911-68.git85c5d90.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043041.629:1461): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mariadb-config-3:10.1.20-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043041.658:1462): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mariadb-common-3:10.1.20-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043041.714:1463): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="kernel-tools-libs-3.10.0-954.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043041.723:1464): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="bind-license-32:9.9.4-72.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043041.732:1465): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="subscription-manager-rhsm-certificates-1.21.10-2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043041.771:1466): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="subscription-manager-rhsm-1.21.10-2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043042.174:1467): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="subscription-manager-1.21.10-2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043042.282:1468): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="bind-libs-lite-32:9.9.4-72.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043042.372:1469): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="kernel-tools-3.10.0-954.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043042.502:1470): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mariadb-libs-3:10.1.20-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043048.834:1471): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="kernel-3.10.0-954.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043048.846:1472): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="NetworkManager-team-1:1.12.0-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043048.878:1473): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="NetworkManager-tui-1:1.12.0-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043049.030:1474): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="nss-tools-3.36.0-7.el7_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043049.140:1475): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-requests-2.14.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043049.213:1476): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="heat-cfntools-1.3.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043049.727:1477): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="tuned-2.10.0-6.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043050.095:1478): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-jinja2-2.10-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043050.117:1479): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-jsonpatch-1.21-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043050.124:1480): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="grub2-1:2.02-0.76.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043050.257:1481): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="policycoreutils-python-2.5-29.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_AVC msg=audit(1538043067.246:1482): pid=2252 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=2) exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' >type=MAC_POLICY_LOAD msg=audit(1538043062.517:1483): policy loaded auid=1000 ses=1 >type=SYSCALL msg=audit(1538043062.517:1483): arch=c000003e syscall=1 success=yes exit=3850055 a0=4 a1=7fb888490000 a2=3abf47 a3=7ffc30d82b60 items=0 ppid=17129 pid=17136 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043062.517:1483): proctitle="load_policy" >type=SOFTWARE_UPDATE msg=audit(1538043068.123:1484): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="selinux-policy-targeted-3.13.1-228.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043069.292:1485): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="hwdata-0.252-9.1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043069.301:1486): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="systemd-sysv-219-62.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043069.326:1487): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rhn-setup-2.0.2-24.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043069.344:1488): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rhn-check-2.0.2-24.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043069.364:1489): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libgudev1-219-62.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043069.535:1490): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-lxml-3.2.1-6.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043069.544:1491): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="NetworkManager-config-server-1:1.12.0-6.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043069.550:1492): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="emacs-filesystem-1:24.3-22.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043069.576:1493): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libtirpc-0.2.4-0.15.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043071.412:1494): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="iwl7265-firmware-22.0.7.0-68.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043071.748:1495): pid=15928 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="sudo-1.8.23-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_AVC msg=audit(1538043071.794:1496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=2) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SERVICE_START msg=audit(1538043072.361:1497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043072.361:1498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043072.779:1499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043175.491:1500): pid=15911 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043175.491:1501): pid=15911 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043175.498:1502): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043175.498:1503): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043175.619:1504): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043175.619:1505): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043175.621:1506): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8972 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043175.638:1507): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043175.638:1508): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043175.650:1509): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043175.650:1510): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043175.651:1511): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8980 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043175.671:1512): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043175.671:1513): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043175.686:1514): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043175.686:1515): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043175.688:1516): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8992 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043175.740:1517): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043175.740:1518): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043175.754:1519): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043175.754:1520): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043175.756:1521): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8999 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043175.771:1522): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043175.772:1523): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043175.790:1524): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043175.790:1525): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043175.791:1526): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9008 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043175.834:1527): pid=9021 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043175.835:1528): pid=9021 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6E7A7A6A746267757A666667626F756E63797664726C6E667A7A62796576713B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333137352E36322D35373331333337303636333833362F79756D2E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333137352E36322D35373331333337303636333833362F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043175.835:1529): pid=9021 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043175.846:1530): pid=9021 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SOFTWARE_UPDATE msg=audit(1538043177.804:1531): pid=9032 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="dstat-0.7.2-12.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043177.950:1532): pid=9021 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043177.950:1533): pid=9021 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043177.954:1534): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043177.955:1535): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043178.032:1536): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043178.032:1537): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.033:1538): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9041 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043178.048:1539): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043178.048:1540): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043178.058:1541): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043178.059:1542): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.059:1543): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9049 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043178.076:1544): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043178.076:1545): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043178.091:1546): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043178.091:1547): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.092:1548): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9061 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043178.116:1549): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043178.116:1550): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043178.127:1551): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043178.127:1552): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.128:1553): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9068 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043178.144:1554): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043178.144:1555): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043178.155:1556): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043178.155:1557): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.156:1558): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9077 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043178.193:1559): pid=9090 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043178.194:1560): pid=9090 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7370676D6869676165736A66707975766D786C76767470686F7A79786775667A3B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333137382E30332D3137353939323736353037363438392F737461742E7079 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043178.194:1561): pid=9090 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043178.196:1562): pid=9090 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043178.343:1563): pid=9090 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043178.343:1564): pid=9090 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043178.346:1565): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043178.346:1566): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043178.363:1567): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043178.363:1568): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.364:1569): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9096 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043178.392:1570): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043178.392:1571): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043178.404:1572): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043178.404:1573): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.405:1574): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9103 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043178.426:1575): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043178.426:1576): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043178.441:1577): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043178.441:1578): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.442:1579): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9112 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043178.473:1580): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043178.473:1581): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043178.485:1582): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043178.485:1583): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.486:1584): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9119 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043178.506:1585): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043178.506:1586): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043178.518:1587): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043178.518:1588): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.519:1589): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9128 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043178.556:1590): pid=9141 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043178.557:1591): pid=9141 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043178.557:1592): pid=9141 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043178.559:1593): pid=9141 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043178.716:1594): pid=9141 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043178.716:1595): pid=9141 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043178.719:1596): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043178.719:1597): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043178.805:1598): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043178.806:1599): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.807:1600): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9148 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043178.820:1601): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043178.820:1602): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043178.838:1603): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043178.839:1604): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.840:1605): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9156 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043178.855:1606): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043178.855:1607): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043178.870:1608): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043178.870:1609): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.871:1610): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9168 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043178.897:1611): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043178.897:1612): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043178.909:1613): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043178.909:1614): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.911:1615): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9175 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043178.924:1616): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043178.924:1617): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043178.935:1618): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043178.936:1619): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043178.937:1620): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9184 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043178.980:1621): pid=9197 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043178.980:1622): pid=9197 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043178.981:1623): pid=9197 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043178.983:1624): pid=9197 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043179.153:1625): pid=9197 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043179.153:1626): pid=9197 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043179.157:1627): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043179.157:1628): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043179.245:1629): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043179.245:1630): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043179.247:1631): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9219 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043179.264:1632): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043179.264:1633): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043179.276:1634): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043179.276:1635): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043179.277:1636): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9227 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043179.296:1637): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043179.296:1638): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043179.311:1639): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043179.311:1640): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043179.312:1641): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9239 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043179.341:1642): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043179.341:1643): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043179.353:1644): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043179.353:1645): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043179.353:1646): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9246 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043179.371:1647): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043179.372:1648): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043179.386:1649): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043179.386:1650): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043179.387:1651): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9255 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043179.426:1652): pid=9268 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043179.426:1653): pid=9268 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64776F6163706F7268706F696D6F756F706E6E717A707A67616F706E6E75796B3B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333137392E32342D3232363432353232373730303436342F73797374656D642E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333137392E32342D3232363432353232373730303436342F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043179.426:1654): pid=9268 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043179.429:1655): pid=9268 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538043179.733:1656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043179.747:1657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538043179.753:1658): pid=9268 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043179.754:1659): pid=9268 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043179.756:1660): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043179.757:1661): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043179.877:1662): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043179.877:1663): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043179.879:1664): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9296 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043179.892:1665): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043179.892:1666): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043179.902:1667): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043179.903:1668): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043179.904:1669): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9304 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043179.921:1670): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043179.921:1671): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043179.934:1672): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043179.934:1673): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043179.936:1674): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9316 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043179.980:1675): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043179.980:1676): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043179.992:1677): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043179.992:1678): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043179.994:1679): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9323 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043180.007:1680): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043180.007:1681): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043180.020:1682): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043180.021:1683): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043180.021:1684): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9332 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043180.063:1685): pid=9345 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043180.063:1686): pid=9345 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043180.063:1687): pid=9345 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043180.066:1688): pid=9345 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043180.515:1689): pid=9345 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043180.515:1690): pid=9345 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043180.519:1691): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043180.519:1692): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043180.621:1693): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043180.621:1694): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043180.623:1695): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9377 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043180.646:1696): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043180.646:1697): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043180.656:1698): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043180.657:1699): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043180.658:1700): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9385 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043180.681:1701): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043180.681:1702): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043180.697:1703): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043180.697:1704): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043180.698:1705): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9397 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043180.731:1706): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043180.731:1707): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043180.743:1708): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043180.743:1709): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043180.744:1710): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9404 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043180.768:1711): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043180.768:1712): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043180.780:1713): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043180.780:1714): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043180.781:1715): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9413 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043180.827:1716): pid=9426 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043180.827:1717): pid=9426 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043180.828:1718): pid=9426 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043180.831:1719): pid=9426 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538043184.816:1720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043184.816:1721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043184.818:1722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043184.829:1723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538043190.066:1724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043190.066:1725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043190.068:1726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043190.074:1727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043191.827:1728): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="ruby-libs-2.0.0.648-33.el7_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043191.859:1729): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libjpeg-turbo-1.2.90-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043191.891:1730): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rubygem-psych-2.0.0-33.el7_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043191.906:1731): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rubygem-bigdecimal-1.2.0-33.el7_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043191.916:1732): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rubygem-io-console-0.4.2-33.el7_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043191.931:1733): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="ruby-2.0.0.648-33.el7_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043191.964:1734): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="ruby-irb-2.0.0.648-33.el7_4.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043191.985:1735): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rubygem-json-1.7.7-33.el7_4.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043192.069:1736): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rubygems-2.0.14.1-33.el7_4.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043192.191:1737): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rubygem-rdoc-4.0.0-33.el7_4.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043192.243:1738): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rubygem-rgen-0.6.6-2.1.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043192.252:1739): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="ruby-shadow-1.4.1-23.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043192.270:1740): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="hiera-1.3.4-1.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043192.281:1741): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libselinux-ruby-2.5-14.1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043192.629:1742): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="augeas-libs-1.4.0-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043192.648:1743): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="ruby-augeas-0.5.0-1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043192.684:1744): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="pciutils-3.5.1-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043192.905:1745): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="facter-1:2.4.4-4.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043192.946:1746): pid=9485 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043192.949:1747): pid=9485 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043192.973:1748): pid=9490 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=52 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043193.971:1749): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-4.8.2-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.098:1750): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-stdlib-4.24.1-0.20180216004353.b0d99ad.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.118:1751): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-inifile-2.2.1-0.20180216005851.d2c38b9.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.135:1752): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-concat-4.1.2-0.20180216000640.d4857df.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.295:1753): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-apache-2.3.1-1.e587f2agit.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.307:1754): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-sysctl-0.0.11-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.323:1755): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-xinetd-3.0.1-0.20180216005257.b95c79c.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.384:1756): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-vcsrepo-2.3.1-0.20180216003251.bb1209e.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.429:1757): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-rsync-0.4.1-0.20180215235612.447685f.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.493:1758): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-firewall-1.12.1-0.20180216004829.3dc1990.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.528:1759): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-memcached-3.1.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.619:1760): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-vswitch-8.4.0-0.20180329150818.fd94e91.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.721:1761): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-horizon-12.4.0-0.20180329033844.64559b8.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.785:1762): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-ssh-3.0.2-0.20180216110734.fb2de75.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.819:1763): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-certmonger-2.3.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.873:1764): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-ovn-12.4.0-0.20180329043503.36ff219.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.894:1765): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-nssdb-1.0.2-0.20180215135314.2ed2a2d.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.956:1766): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-redis-3.2.1-0.20180216095743.bfcc212.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043194.996:1767): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-archive-2.2.1-0.20180216011041.10888db.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043195.089:1768): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-rabbitmq-8.1.1-0.20180216013831.d4b06b7.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043195.128:1769): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-corosync-6.0.1-0.20180216001140.9940eb9.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043195.162:1770): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-openstack_extras-12.4.1-0.20180413042250.2634296.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043195.187:1771): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-staging-1.0.5-0.20180215133924.b466d93.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043195.242:1772): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-mysql-5.2.2-0.20180216012141.a5497b2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043195.291:1773): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-openstacklib-12.4.0-0.20180329042555.4b30e6f.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043195.327:1774): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-oslo-12.4.0-0.20180329043028.2259336.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043195.435:1775): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-keystone-12.4.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043195.515:1776): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-glance-12.5.0-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043195.619:1777): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-cinder-12.4.1-0.20180628102250.641e036.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043195.917:1778): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-nova-12.4.0-6.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043196.118:1779): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-neutron-12.4.1-1.3aa3109git.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043196.188:1780): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-manila-12.4.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043196.303:1781): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-ironic-12.4.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043196.500:1782): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-ceilometer-12.5.1-0.20180413035711.940590e.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043196.659:1783): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-gnocchi-12.4.0-0.20180329032858.5dfa350.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043196.929:1784): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-swift-12.4.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043197.092:1785): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-heat-12.4.1-0.20180416203421.90e3fb0.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043197.266:1786): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-trove-12.4.0-0.20180329050409.e7bfdc9.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043197.405:1787): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-sahara-12.4.0-0.20180329044358.42162c3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043197.505:1788): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-panko-12.4.0-0.20180329043927.7641dbe.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043197.644:1789): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-aodh-12.4.0-0.20180329025539.8b519d2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043197.745:1790): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-tempest-12.5.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043197.774:1791): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="puppet-remote-10.0.0-0.20180215135737.7420908.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043197.988:1792): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-packstack-puppet-1:12.0.0-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043198.009:1793): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-netifaces-0.10.4-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043198.560:1794): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-netaddr-0.7.19-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043198.607:1795): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libwebp-0.3.0-7.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043198.637:1796): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="jbigkit-libs-2.0-11.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043198.682:1797): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libtiff-4.0.3-27.el7_3.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043198.918:1798): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-pillow-2.0.0-19.gitd1c6db8.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043199.067:1799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043199.067:1800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043199.068:1801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043199.082:1802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043199.353:1803): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-docutils-0.12-0.2.20140510svn7747.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043199.437:1804): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-pbr-3.1.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043199.541:1805): pid=9437 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-packstack-1:12.0.0-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043200.083:1806): pid=9426 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043200.083:1807): pid=9426 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043200.090:1808): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043200.090:1809): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043200.177:1810): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043200.178:1811): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043200.180:1812): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9519 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043200.198:1813): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043200.198:1814): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043200.208:1815): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043200.209:1816): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043200.210:1817): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9527 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043200.236:1818): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043200.236:1819): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043200.249:1820): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043200.250:1821): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043200.251:1822): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9539 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043200.276:1823): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043200.277:1824): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043200.288:1825): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043200.288:1826): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043200.289:1827): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9546 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043200.306:1828): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043200.306:1829): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043200.320:1830): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043200.320:1831): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043200.321:1832): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9555 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043200.373:1833): pid=9568 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043200.374:1834): pid=9568 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043200.374:1835): pid=9568 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043200.383:1836): pid=9568 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043201.737:1837): pid=9580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=9580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043201.737:1838): pid=9580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=9580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043201.737:1839): pid=9580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043201.813:1840): pid=9568 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043201.813:1841): pid=9568 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043201.817:1842): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043201.817:1843): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043202.070:1844): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043202.071:1845): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043202.072:1846): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9583 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043202.086:1847): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043202.086:1848): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043202.097:1849): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043202.097:1850): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043202.098:1851): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9591 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043202.114:1852): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043202.114:1853): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043202.129:1854): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043202.129:1855): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043202.130:1856): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9603 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043202.154:1857): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043202.154:1858): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043202.166:1859): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043202.166:1860): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043202.167:1861): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9610 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043202.181:1862): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043202.181:1863): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043202.195:1864): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043202.195:1865): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043202.196:1866): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9619 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043202.229:1867): pid=9632 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043202.229:1868): pid=9632 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043202.229:1869): pid=9632 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043202.232:1870): pid=9632 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043202.535:1871): pid=9632 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043202.535:1872): pid=9632 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043202.538:1873): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043202.538:1874): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043202.639:1875): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043202.639:1876): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043202.641:1877): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9639 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043202.655:1878): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043202.655:1879): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043202.668:1880): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043202.668:1881): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043202.669:1882): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9647 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043202.689:1883): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043202.689:1884): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043202.702:1885): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043202.702:1886): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043202.703:1887): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9659 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043202.732:1888): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043202.732:1889): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043202.745:1890): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043202.745:1891): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043202.745:1892): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9666 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043202.766:1893): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043202.766:1894): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043202.777:1895): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043202.777:1896): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043202.778:1897): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9675 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043202.815:1898): pid=9688 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043202.815:1899): pid=9688 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043202.815:1900): pid=9688 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043202.818:1901): pid=9688 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043202.982:1902): pid=9688 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043202.982:1903): pid=9688 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043202.986:1904): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043202.986:1905): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043203.048:1906): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043203.048:1907): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043203.049:1908): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9695 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043203.063:1909): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043203.063:1910): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043203.076:1911): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043203.076:1912): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043203.076:1913): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9703 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043203.091:1914): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043203.092:1915): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043203.105:1916): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043203.105:1917): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043203.106:1918): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9715 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043203.129:1919): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043203.129:1920): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043203.141:1921): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043203.141:1922): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043203.142:1923): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9722 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043203.154:1924): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043203.155:1925): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043203.167:1926): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043203.167:1927): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043203.168:1928): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9731 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043203.194:1929): pid=9744 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043203.195:1930): pid=9744 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043203.195:1931): pid=9744 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043203.198:1932): pid=9744 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043203.498:1933): pid=9744 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043203.498:1934): pid=9744 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043203.501:1935): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043203.501:1936): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538043204.316:1937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043204.316:1938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043204.318:1939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043204.327:1940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_LOGIN msg=audit(1538043204.398:1941): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043204.399:1942): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043204.400:1943): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9754 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043204.418:1944): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043204.418:1945): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043204.429:1946): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043204.429:1947): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043204.430:1948): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9762 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043204.451:1949): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043204.451:1950): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043204.464:1951): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043204.464:1952): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043204.465:1953): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9774 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043204.495:1954): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043204.495:1955): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043204.506:1956): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043204.506:1957): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043204.507:1958): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9781 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043204.526:1959): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043204.526:1960): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043204.538:1961): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043204.538:1962): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043204.539:1963): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9790 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043204.575:1964): pid=9803 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043204.575:1965): pid=9803 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043204.575:1966): pid=9803 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043204.577:1967): pid=9803 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043204.808:1968): pid=9803 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043204.809:1969): pid=9803 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043204.811:1970): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043204.811:1971): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043204.929:1972): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043204.929:1973): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043204.930:1974): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9810 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043204.951:1975): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043204.951:1976): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043204.962:1977): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043204.962:1978): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043204.963:1979): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9818 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043204.985:1980): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043204.985:1981): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043204.998:1982): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043204.998:1983): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043204.998:1984): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9830 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043205.028:1985): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043205.028:1986): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043205.040:1987): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043205.040:1988): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043205.041:1989): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9837 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043205.060:1990): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043205.060:1991): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043205.072:1992): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043205.072:1993): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043205.073:1994): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9846 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043205.109:1995): pid=9859 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043205.109:1996): pid=9859 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62756266637569676B6575636775717372696D66797172616273797063686A6D3B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333230342E39332D3232323535393230343031383534362F696E695F66696C652E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333230342E39332D3232323535393230343031383534362F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043205.110:1997): pid=9859 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043205.111:1998): pid=9859 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043205.268:1999): pid=9859 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043205.268:2000): pid=9859 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043205.271:2001): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043205.271:2002): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043205.332:2003): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043205.332:2004): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043205.334:2005): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9866 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043205.348:2006): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043205.348:2007): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043205.359:2008): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043205.359:2009): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043205.360:2010): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9874 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043205.382:2011): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043205.382:2012): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043205.395:2013): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043205.395:2014): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043205.396:2015): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9886 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043205.423:2016): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043205.423:2017): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043205.435:2018): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043205.435:2019): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043205.436:2020): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9893 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043205.450:2021): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043205.450:2022): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043205.462:2023): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043205.462:2024): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043205.463:2025): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9902 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043205.500:2026): pid=9915 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043205.500:2027): pid=9915 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043205.501:2028): pid=9915 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043205.504:2029): pid=9915 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043205.643:2030): pid=9915 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043205.643:2031): pid=9915 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043205.647:2032): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043205.647:2033): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043205.708:2034): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043205.708:2035): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043205.710:2036): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9922 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043205.724:2037): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043205.724:2038): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043205.736:2039): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043205.736:2040): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043205.736:2041): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9930 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043205.759:2042): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043205.759:2043): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043205.772:2044): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043205.772:2045): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043205.773:2046): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9942 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043205.801:2047): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043205.802:2048): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043205.813:2049): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043205.813:2050): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043205.814:2051): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9949 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043205.836:2052): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043205.836:2053): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043205.848:2054): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043205.848:2055): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043205.849:2056): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9958 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043205.885:2057): pid=9971 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043205.886:2058): pid=9971 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043205.886:2059): pid=9971 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043205.888:2060): pid=9971 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043206.049:2061): pid=9971 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043206.049:2062): pid=9971 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043206.052:2063): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043206.052:2064): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043206.114:2065): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043206.114:2066): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043206.115:2067): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9978 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043206.135:2068): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043206.135:2069): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043206.146:2070): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043206.146:2071): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043206.147:2072): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9986 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043206.166:2073): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043206.166:2074): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043206.180:2075): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043206.180:2076): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043206.182:2077): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=9998 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043206.212:2078): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043206.212:2079): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043206.224:2080): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043206.224:2081): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043206.225:2082): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10005 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043206.243:2083): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043206.243:2084): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043206.255:2085): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043206.255:2086): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043206.256:2087): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10014 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043206.293:2088): pid=10027 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043206.293:2089): pid=10027 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043206.293:2090): pid=10027 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043206.295:2091): pid=10027 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043206.455:2092): pid=10027 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043206.455:2093): pid=10027 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043206.458:2094): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043206.458:2095): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043206.522:2096): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043206.522:2097): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043206.523:2098): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10034 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043206.544:2099): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043206.544:2100): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043206.555:2101): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043206.555:2102): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043206.556:2103): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10042 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043206.575:2104): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043206.575:2105): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043206.588:2106): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043206.588:2107): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043206.589:2108): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10054 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043206.616:2109): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043206.616:2110): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043206.627:2111): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043206.627:2112): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043206.628:2113): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10061 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043206.644:2114): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043206.644:2115): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043206.656:2116): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043206.656:2117): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043206.657:2118): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10070 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043206.706:2119): pid=10083 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043206.707:2120): pid=10083 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043206.707:2121): pid=10083 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043206.711:2122): pid=10083 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043206.873:2123): pid=10083 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043206.874:2124): pid=10083 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043206.877:2125): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043206.877:2126): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043206.945:2127): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043206.945:2128): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043206.947:2129): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10090 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043206.967:2130): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043206.968:2131): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043206.979:2132): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043206.979:2133): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043206.980:2134): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10098 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043207.005:2135): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043207.005:2136): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043207.018:2137): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043207.018:2138): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043207.019:2139): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10110 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043207.050:2140): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043207.050:2141): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043207.061:2142): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043207.061:2143): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043207.062:2144): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10117 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043207.084:2145): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043207.084:2146): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043207.095:2147): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043207.095:2148): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043207.096:2149): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10126 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043207.138:2150): pid=10139 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043207.138:2151): pid=10139 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043207.138:2152): pid=10139 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043207.141:2153): pid=10139 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043207.452:2154): pid=10139 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043207.453:2155): pid=10139 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043207.456:2156): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043207.456:2157): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043207.519:2158): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043207.519:2159): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043207.520:2160): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10146 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043207.541:2161): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043207.542:2162): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043207.553:2163): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043207.553:2164): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043207.553:2165): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10154 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043207.579:2166): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043207.579:2167): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043207.593:2168): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043207.593:2169): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043207.594:2170): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10166 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043207.627:2171): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043207.627:2172): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043207.639:2173): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043207.639:2174): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043207.640:2175): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10173 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043207.663:2176): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043207.663:2177): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043207.675:2178): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043207.675:2179): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043207.677:2180): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10182 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043207.712:2181): pid=10195 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043207.712:2182): pid=10195 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6B7A62726165757A72706C6E6E69656B6A656B61746363746268706B7A73643B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333230372E35322D3237353631343130343632333433332F696E695F66696C652E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333230372E35322D3237353631343130343632333433332F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043207.712:2183): pid=10195 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043207.715:2184): pid=10195 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043208.049:2185): pid=10195 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043208.050:2186): pid=10195 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043208.054:2187): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043208.054:2188): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043208.120:2189): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043208.120:2190): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043208.122:2191): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10202 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043208.144:2192): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043208.144:2193): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043208.155:2194): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043208.155:2195): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043208.156:2196): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10210 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043208.181:2197): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043208.182:2198): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043208.195:2199): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043208.195:2200): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043208.196:2201): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10222 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043208.229:2202): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043208.229:2203): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043208.240:2204): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043208.240:2205): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043208.241:2206): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10229 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043208.263:2207): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043208.263:2208): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043208.275:2209): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043208.275:2210): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043208.276:2211): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10238 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043208.324:2212): pid=10251 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043208.324:2213): pid=10251 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043208.324:2214): pid=10251 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043208.327:2215): pid=10251 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043208.487:2216): pid=10251 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043208.488:2217): pid=10251 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043208.492:2218): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043208.492:2219): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043208.555:2220): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043208.555:2221): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043208.557:2222): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10258 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043208.579:2223): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043208.579:2224): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043208.590:2225): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043208.590:2226): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043208.591:2227): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10266 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043208.617:2228): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043208.617:2229): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043208.630:2230): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043208.630:2231): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043208.631:2232): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10278 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043208.665:2233): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043208.665:2234): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043208.677:2235): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043208.677:2236): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043208.678:2237): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10285 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043208.701:2238): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043208.701:2239): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043208.713:2240): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043208.713:2241): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043208.715:2242): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10294 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043208.763:2243): pid=10307 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043208.763:2244): pid=10307 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043208.764:2245): pid=10307 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043208.767:2246): pid=10307 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043208.931:2247): pid=10307 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043208.932:2248): pid=10307 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043208.936:2249): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043208.936:2250): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043208.998:2251): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043208.999:2252): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043209.000:2253): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10314 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043209.025:2254): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043209.025:2255): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043209.038:2256): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043209.038:2257): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043209.039:2258): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10322 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043209.065:2259): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043209.065:2260): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043209.078:2261): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043209.078:2262): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043209.079:2263): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10334 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043209.114:2264): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043209.114:2265): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043209.128:2266): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043209.129:2267): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043209.129:2268): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10341 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043209.145:2269): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043209.145:2270): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043209.157:2271): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043209.157:2272): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043209.158:2273): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10350 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043209.188:2274): pid=10363 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043209.188:2275): pid=10363 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043209.188:2276): pid=10363 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043209.190:2277): pid=10363 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043209.373:2278): pid=10363 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043209.374:2279): pid=10363 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043209.377:2280): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043209.377:2281): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538043209.567:2282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043209.567:2283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043209.568:2284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043209.572:2285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_LOGIN msg=audit(1538043209.686:2286): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043209.686:2287): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043209.688:2288): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10373 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043209.708:2289): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043209.709:2290): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043209.719:2291): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043209.720:2292): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043209.721:2293): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10381 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043209.744:2294): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043209.744:2295): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043209.758:2296): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043209.758:2297): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043209.759:2298): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10393 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043209.792:2299): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043209.792:2300): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043209.806:2301): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043209.806:2302): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043209.807:2303): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10400 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043209.828:2304): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043209.828:2305): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043209.840:2306): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043209.841:2307): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043209.842:2308): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10409 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043209.883:2309): pid=10422 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043209.883:2310): pid=10422 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043209.883:2311): pid=10422 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043209.886:2312): pid=10422 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043210.218:2313): pid=10422 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043210.219:2314): pid=10422 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043210.222:2315): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043210.222:2316): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043210.283:2317): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043210.283:2318): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043210.285:2319): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10429 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043210.302:2320): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043210.302:2321): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043210.313:2322): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043210.313:2323): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043210.314:2324): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10437 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043210.336:2325): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043210.336:2326): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043210.350:2327): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043210.350:2328): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043210.351:2329): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10450 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043210.380:2330): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043210.380:2331): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043210.393:2332): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043210.393:2333): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043210.394:2334): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10457 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043210.411:2335): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043210.412:2336): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043210.425:2337): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043210.425:2338): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043210.427:2339): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10466 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043210.459:2340): pid=10479 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043210.459:2341): pid=10479 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043210.460:2342): pid=10479 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043210.461:2343): pid=10479 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043210.625:2344): pid=10479 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043210.625:2345): pid=10479 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043210.628:2346): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043210.628:2347): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043210.714:2348): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043210.714:2349): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043210.716:2350): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10486 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043210.732:2351): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043210.732:2352): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043210.744:2353): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043210.744:2354): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043210.744:2355): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10494 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043210.761:2356): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043210.761:2357): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043210.776:2358): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043210.776:2359): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043210.777:2360): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10506 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043210.801:2361): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043210.801:2362): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043210.813:2363): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043210.813:2364): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043210.813:2365): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10513 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043210.830:2366): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043210.830:2367): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043210.842:2368): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043210.842:2369): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043210.843:2370): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10522 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043210.882:2371): pid=10535 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043210.883:2372): pid=10535 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043210.883:2373): pid=10535 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043210.886:2374): pid=10535 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043211.001:2375): pid=10535 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043211.001:2376): pid=10535 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043211.005:2377): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043211.005:2378): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043211.065:2379): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043211.066:2380): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043211.066:2381): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10542 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043211.082:2382): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043211.082:2383): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043211.093:2384): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043211.093:2385): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043211.094:2386): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10550 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043211.113:2387): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043211.114:2388): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043211.127:2389): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043211.127:2390): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043211.128:2391): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10562 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043211.154:2392): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043211.154:2393): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043211.167:2394): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043211.167:2395): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043211.168:2396): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10569 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043211.190:2397): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043211.190:2398): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043211.202:2399): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043211.202:2400): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043211.203:2401): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10578 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043211.243:2402): pid=10591 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043211.244:2403): pid=10591 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043211.244:2404): pid=10591 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043211.248:2405): pid=10591 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043211.553:2406): pid=10591 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043211.553:2407): pid=10591 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043211.557:2408): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043211.557:2409): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043211.625:2410): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043211.625:2411): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043211.626:2412): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10598 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043211.643:2413): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043211.643:2414): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043211.655:2415): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043211.655:2416): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043211.656:2417): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10606 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043211.675:2418): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043211.675:2419): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043211.689:2420): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043211.689:2421): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043211.690:2422): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10618 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043211.724:2423): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043211.724:2424): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043211.736:2425): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043211.736:2426): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043211.737:2427): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10625 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043211.760:2428): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043211.760:2429): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043211.772:2430): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043211.772:2431): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043211.773:2432): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10634 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043211.815:2433): pid=10647 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043211.816:2434): pid=10647 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043211.816:2435): pid=10647 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043211.819:2436): pid=10647 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043212.162:2437): pid=10647 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043212.162:2438): pid=10647 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043212.165:2439): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043212.166:2440): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043212.226:2441): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043212.226:2442): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043212.228:2443): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10654 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043212.250:2444): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043212.250:2445): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043212.261:2446): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043212.261:2447): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043212.262:2448): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10662 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043212.286:2449): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043212.286:2450): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043212.300:2451): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043212.300:2452): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043212.300:2453): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10674 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043212.327:2454): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043212.327:2455): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043212.339:2456): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043212.339:2457): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043212.339:2458): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10681 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043212.356:2459): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043212.356:2460): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043212.368:2461): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043212.369:2462): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043212.370:2463): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10690 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043212.408:2464): pid=10703 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043212.409:2465): pid=10703 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043212.409:2466): pid=10703 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043212.411:2467): pid=10703 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043212.525:2468): pid=10703 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043212.525:2469): pid=10703 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043212.528:2470): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043212.528:2471): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043212.591:2472): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043212.591:2473): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043212.592:2474): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10710 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043212.609:2475): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043212.609:2476): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043212.620:2477): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043212.620:2478): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043212.622:2479): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10718 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043212.645:2480): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043212.645:2481): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043212.659:2482): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043212.659:2483): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043212.660:2484): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10730 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043212.695:2485): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043212.696:2486): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043212.707:2487): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043212.707:2488): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043212.708:2489): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10737 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043212.732:2490): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043212.733:2491): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043212.745:2492): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043212.745:2493): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043212.747:2494): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10746 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043212.784:2495): pid=10759 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043212.785:2496): pid=10759 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7979747866636973667370696261726C73686F61756C66646E61796F707067623B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333231322E35392D3130323633363631313535373131362F696E695F66696C652E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333231322E35392D3130323633363631313535373131362F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043212.785:2497): pid=10759 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043212.789:2498): pid=10759 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043213.162:2499): pid=10759 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043213.162:2500): pid=10759 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043213.166:2501): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043213.166:2502): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043213.234:2503): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043213.234:2504): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043213.235:2505): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10766 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043213.253:2506): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043213.253:2507): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043213.266:2508): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043213.266:2509): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043213.267:2510): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10774 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043213.286:2511): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043213.287:2512): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043213.303:2513): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043213.303:2514): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043213.304:2515): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10786 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043213.329:2516): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043213.329:2517): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043213.343:2518): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043213.343:2519): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043213.344:2520): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10793 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043213.362:2521): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043213.362:2522): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043213.375:2523): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043213.375:2524): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043213.376:2525): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10802 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043213.425:2526): pid=10815 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043213.425:2527): pid=10815 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043213.426:2528): pid=10815 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043213.428:2529): pid=10815 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043213.543:2530): pid=10815 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043213.543:2531): pid=10815 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043213.546:2532): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043213.546:2533): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043213.610:2534): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043213.611:2535): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043213.612:2536): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10822 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043213.624:2537): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043213.624:2538): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043213.636:2539): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043213.636:2540): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043213.636:2541): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10830 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043213.652:2542): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043213.652:2543): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043213.667:2544): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043213.667:2545): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043213.668:2546): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10842 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043213.690:2547): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043213.690:2548): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043213.702:2549): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043213.702:2550): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043213.703:2551): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10849 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043213.716:2552): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043213.716:2553): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043213.728:2554): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043213.728:2555): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043213.728:2556): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10858 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043213.758:2557): pid=10871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043213.758:2558): pid=10871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043213.758:2559): pid=10871 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043213.760:2560): pid=10871 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043213.877:2561): pid=10871 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043213.877:2562): pid=10871 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043213.880:2563): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043213.880:2564): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043213.943:2565): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043213.943:2566): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043213.944:2567): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10878 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043213.956:2568): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043213.956:2569): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043213.968:2570): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043213.968:2571): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043213.969:2572): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10886 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043213.983:2573): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043213.983:2574): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043213.997:2575): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043213.997:2576): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043213.998:2577): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10898 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043214.022:2578): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043214.022:2579): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043214.034:2580): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043214.034:2581): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043214.034:2582): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10905 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043214.047:2583): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043214.047:2584): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043214.059:2585): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043214.059:2586): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043214.060:2587): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10914 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043214.086:2588): pid=10927 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043214.086:2589): pid=10927 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043214.086:2590): pid=10927 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043214.088:2591): pid=10927 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043214.350:2592): pid=10927 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043214.350:2593): pid=10927 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043214.354:2594): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043214.354:2595): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043214.456:2596): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043214.456:2597): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043214.457:2598): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10934 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043214.473:2599): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043214.473:2600): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043214.484:2601): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043214.484:2602): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043214.485:2603): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10942 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043214.505:2604): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043214.505:2605): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043214.518:2606): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043214.519:2607): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043214.519:2608): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10955 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043214.548:2609): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043214.548:2610): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043214.559:2611): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043214.559:2612): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043214.560:2613): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10962 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043214.579:2614): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043214.579:2615): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043214.591:2616): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043214.591:2617): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043214.592:2618): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10971 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043214.626:2619): pid=10984 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043214.626:2620): pid=10984 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737561626B67716F676F7571666E7262616D6F777676796374776B73746B666D3B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333231342E34362D3235303838383435303338323435342F696E695F66696C652E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333231342E34362D3235303838383435303338323435342F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043214.627:2621): pid=10984 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538043214.628:2622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043214.628:2623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043214.629:2624): pid=10984 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538043214.629:2625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043214.634:2626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538043214.741:2627): pid=10984 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043214.742:2628): pid=10984 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043214.744:2629): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043214.744:2630): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043214.806:2631): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043214.806:2632): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043214.808:2633): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=10994 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043214.825:2634): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043214.826:2635): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043214.837:2636): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043214.837:2637): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043214.838:2638): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11002 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043214.853:2639): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043214.853:2640): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043214.867:2641): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043214.867:2642): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043214.868:2643): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11014 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043214.891:2644): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043214.891:2645): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043214.903:2646): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043214.903:2647): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043214.904:2648): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11021 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043214.917:2649): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043214.917:2650): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043214.929:2651): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043214.929:2652): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043214.930:2653): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11030 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043214.957:2654): pid=11043 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043214.957:2655): pid=11043 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043214.957:2656): pid=11043 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043214.959:2657): pid=11043 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043215.125:2658): pid=11043 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043215.125:2659): pid=11043 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043215.128:2660): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043215.128:2661): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043215.190:2662): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043215.191:2663): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.192:2664): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11050 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043215.204:2665): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043215.204:2666): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043215.216:2667): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043215.216:2668): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.216:2669): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11058 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043215.231:2670): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043215.231:2671): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043215.245:2672): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043215.245:2673): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.246:2674): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11070 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043215.292:2675): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043215.292:2676): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043215.304:2677): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043215.304:2678): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.305:2679): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11077 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043215.318:2680): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043215.318:2681): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043215.330:2682): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043215.330:2683): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.331:2684): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11086 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043215.357:2685): pid=11099 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043215.357:2686): pid=11099 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043215.357:2687): pid=11099 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043215.359:2688): pid=11099 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043215.472:2689): pid=11099 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043215.472:2690): pid=11099 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043215.474:2691): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043215.474:2692): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043215.535:2693): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043215.536:2694): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.537:2695): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11106 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043215.553:2696): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043215.554:2697): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043215.567:2698): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043215.567:2699): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.568:2700): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11114 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043215.583:2701): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043215.583:2702): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043215.595:2703): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043215.596:2704): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.596:2705): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11126 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043215.620:2706): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043215.620:2707): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043215.634:2708): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043215.634:2709): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.634:2710): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11133 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043215.648:2711): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043215.648:2712): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043215.660:2713): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043215.660:2714): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.661:2715): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11142 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043215.689:2716): pid=11155 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043215.690:2717): pid=11155 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043215.690:2718): pid=11155 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043215.692:2719): pid=11155 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043215.802:2720): pid=11155 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043215.802:2721): pid=11155 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043215.804:2722): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043215.804:2723): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043215.869:2724): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043215.869:2725): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.870:2726): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11162 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043215.885:2727): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043215.885:2728): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043215.899:2729): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043215.899:2730): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.900:2731): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11170 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043215.919:2732): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043215.919:2733): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043215.932:2734): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043215.932:2735): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.933:2736): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11182 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043215.957:2737): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043215.957:2738): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043215.969:2739): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043215.969:2740): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043215.970:2741): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11189 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043215.986:2742): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043215.986:2743): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043215.999:2744): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043215.999:2745): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043216.000:2746): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11198 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043216.037:2747): pid=11211 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043216.037:2748): pid=11211 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043216.037:2749): pid=11211 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043216.040:2750): pid=11211 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043216.154:2751): pid=11211 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043216.154:2752): pid=11211 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043216.157:2753): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043216.157:2754): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043216.219:2755): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043216.219:2756): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043216.220:2757): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11218 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043216.233:2758): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043216.233:2759): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043216.243:2760): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043216.243:2761): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043216.244:2762): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11226 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043216.260:2763): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043216.260:2764): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043216.273:2765): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043216.273:2766): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043216.274:2767): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11238 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043216.297:2768): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043216.297:2769): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043216.310:2770): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043216.310:2771): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043216.311:2772): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11245 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043216.325:2773): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043216.325:2774): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043216.337:2775): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043216.337:2776): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043216.338:2777): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11254 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043216.364:2778): pid=11267 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043216.365:2779): pid=11267 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A69756A77686E77796C617472686A676C70777A646677636366626F646761643B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333231362E32322D3132363837393636333135393532382F696E695F66696C652E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034333231362E32322D3132363837393636333135393532382F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043216.365:2780): pid=11267 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043216.367:2781): pid=11267 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043216.645:2782): pid=11267 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043216.645:2783): pid=11267 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043216.649:2784): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043216.650:2785): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043216.713:2786): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043216.713:2787): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043216.715:2788): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11274 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043216.729:2789): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043216.729:2790): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043216.740:2791): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043216.740:2792): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043216.741:2793): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11282 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043216.763:2794): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043216.763:2795): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043216.776:2796): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043216.776:2797): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043216.777:2798): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11294 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043216.809:2799): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043216.809:2800): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043216.821:2801): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043216.821:2802): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043216.821:2803): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11301 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043216.837:2804): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043216.838:2805): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043216.849:2806): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043216.849:2807): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043216.850:2808): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11310 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043216.889:2809): pid=11323 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043216.889:2810): pid=11323 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043216.889:2811): pid=11323 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043216.891:2812): pid=11323 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043217.189:2813): pid=11323 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043217.189:2814): pid=11323 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043217.192:2815): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043217.192:2816): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043217.303:2817): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043217.303:2818): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043217.305:2819): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11330 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043217.325:2820): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043217.325:2821): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043217.338:2822): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043217.338:2823): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043217.340:2824): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11338 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043217.357:2825): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043217.357:2826): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043217.371:2827): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043217.371:2828): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043217.372:2829): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11350 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043217.404:2830): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043217.405:2831): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043217.416:2832): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043217.417:2833): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043217.418:2834): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11357 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043217.433:2835): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043217.433:2836): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043217.446:2837): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043217.446:2838): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043217.447:2839): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11366 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043217.484:2840): pid=11379 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043217.484:2841): pid=11379 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043217.484:2842): pid=11379 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043217.486:2843): pid=11379 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043217.598:2844): pid=11379 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043217.598:2845): pid=11379 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043217.601:2846): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043217.601:2847): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043217.700:2848): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043217.700:2849): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043217.701:2850): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11386 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043217.713:2851): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043217.713:2852): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043217.724:2853): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043217.725:2854): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043217.725:2855): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11394 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043217.741:2856): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043217.741:2857): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043217.753:2858): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043217.753:2859): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043217.754:2860): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11406 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043217.777:2861): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043217.777:2862): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043217.791:2863): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043217.791:2864): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043217.792:2865): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11413 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043217.806:2866): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043217.807:2867): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043217.819:2868): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043217.819:2869): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043217.820:2870): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11422 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043217.858:2871): pid=11435 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043217.858:2872): pid=11435 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043217.858:2873): pid=11435 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043217.860:2874): pid=11435 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043217.971:2875): pid=11435 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043217.971:2876): pid=11435 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043217.974:2877): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043217.974:2878): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043218.061:2879): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043218.061:2880): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043218.062:2881): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11442 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043218.078:2882): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043218.079:2883): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043218.089:2884): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043218.089:2885): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043218.090:2886): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11450 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043218.107:2887): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043218.108:2888): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043218.121:2889): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043218.121:2890): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043218.122:2891): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11462 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043218.149:2892): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043218.150:2893): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043218.161:2894): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043218.161:2895): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043218.163:2896): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11469 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043218.183:2897): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043218.184:2898): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043218.194:2899): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043218.195:2900): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043218.195:2901): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11478 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043218.235:2902): pid=11491 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043218.235:2903): pid=11491 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043218.236:2904): pid=11491 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043218.238:2905): pid=11491 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043218.351:2906): pid=11491 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043218.351:2907): pid=11491 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043218.355:2908): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043218.355:2909): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043219.034:2910): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043219.035:2911): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043219.036:2912): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11498 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043219.050:2913): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043219.050:2914): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043219.061:2915): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043219.061:2916): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043219.062:2917): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11506 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043219.084:2918): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043219.084:2919): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043219.097:2920): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043219.097:2921): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043219.097:2922): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11518 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043219.125:2923): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043219.125:2924): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043219.137:2925): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043219.137:2926): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043219.137:2927): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11525 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043219.158:2928): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043219.158:2929): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043219.169:2930): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043219.170:2931): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043219.171:2932): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11534 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043219.214:2933): pid=11547 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043219.214:2934): pid=11547 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043219.214:2935): pid=11547 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043219.218:2936): pid=11547 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043219.333:2937): pid=11547 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538043219.333:2938): pid=11547 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538043219.337:2939): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538043219.337:2940): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538043219.423:2941): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043219.423:2942): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043219.424:2943): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11554 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043219.442:2944): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043219.442:2945): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043219.453:2946): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043219.453:2947): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043219.454:2948): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11562 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043219.477:2949): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043219.477:2950): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043219.490:2951): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043219.490:2952): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043219.492:2953): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11574 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043219.523:2954): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043219.524:2955): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043219.538:2956): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538043219.538:2957): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043219.540:2958): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11581 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043219.562:2959): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043219.562:2960): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043219.575:2961): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043219.576:2962): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538043219.576:2963): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11590 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043219.617:2964): pid=11603 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538043219.618:2965): pid=11603 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538043219.618:2966): pid=11603 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538043219.621:2967): pid=11603 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538043219.816:2968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043219.816:2969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043219.817:2970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043219.821:2971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043220.262:2972): pid=11620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043220.262:2973): pid=11620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043220.262:2974): pid=11620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043220.347:2975): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043220.347:2976): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043220.347:2977): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11631 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043220.350:2978): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11631 suid=74 rport=52380 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043220.350:2979): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11631 suid=74 rport=52380 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043220.415:2980): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52380 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043220.415:2981): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52380 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043220.422:2982): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043220.422:2983): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11631 suid=74 rport=52380 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043220.423:2984): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043220.423:2985): pid=11630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043220.423:2986): pid=11630 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=2 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043220.578:2987): pid=11630 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043220.617:2988): pid=11630 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043220.659:2989): pid=11630 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043220.659:2990): pid=11630 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043220.662:2991): pid=11633 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043220.662:2992): pid=11633 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043220.662:2993): pid=11633 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043220.664:2994): pid=11633 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043221.642:2995): pid=11630 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043221.642:2996): pid=11630 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043221.643:2997): pid=11630 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043221.643:2998): pid=11630 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043221.643:2999): pid=11630 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043221.643:3000): pid=11630 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043221.643:3001): pid=11630 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043221.643:3002): pid=11630 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11630 suid=0 rport=52380 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043222.155:3003): pid=11650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043222.155:3004): pid=11650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043222.155:3005): pid=11650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043222.157:3006): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11650 suid=74 rport=52382 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043222.157:3007): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11650 suid=74 rport=52382 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043222.212:3008): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52382 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043222.212:3009): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52382 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043222.218:3010): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043222.219:3011): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11650 suid=74 rport=52382 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043222.221:3012): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043222.221:3013): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043222.221:3014): pid=11649 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=3 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043222.365:3015): pid=11649 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043222.401:3016): pid=11649 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043222.442:3017): pid=11649 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043222.443:3018): pid=11649 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043222.445:3019): pid=11652 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043222.445:3020): pid=11652 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043222.445:3021): pid=11652 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043222.447:3022): pid=11652 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043223.494:3023): pid=11649 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043223.494:3024): pid=11649 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043223.494:3025): pid=11649 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043223.494:3026): pid=11649 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043223.495:3027): pid=11649 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043223.495:3028): pid=11649 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043223.495:3029): pid=11649 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043223.495:3030): pid=11649 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11649 suid=0 rport=52382 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043223.514:3031): pid=11670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043223.514:3032): pid=11670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043223.514:3033): pid=11670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043223.515:3034): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11670 suid=74 rport=52384 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043223.515:3035): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11670 suid=74 rport=52384 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043223.571:3036): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52384 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043223.571:3037): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52384 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043223.577:3038): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043223.578:3039): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11670 suid=74 rport=52384 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043223.579:3040): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043223.579:3041): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043223.580:3042): pid=11669 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=4 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043223.723:3043): pid=11669 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043223.745:3044): pid=11669 uid=0 auid=0 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043223.786:3045): pid=11669 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043223.786:3046): pid=11669 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043223.788:3047): pid=11672 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043223.789:3048): pid=11672 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043223.789:3049): pid=11672 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043223.790:3050): pid=11672 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043225.068:3051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043225.068:3052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043225.081:3053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043225.091:3054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043228.921:3055): pid=11675 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="nmap-ncat-2:6.40-16.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043229.683:3056): pid=11669 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043229.683:3057): pid=11669 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043229.684:3058): pid=11669 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043229.684:3059): pid=11669 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.684:3060): pid=11669 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.684:3061): pid=11669 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.684:3062): pid=11669 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.684:3063): pid=11669 uid=0 auid=0 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11669 suid=0 rport=52384 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.697:3064): pid=11734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.697:3065): pid=11734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.697:3066): pid=11734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043229.698:3067): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11734 suid=74 rport=52418 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043229.698:3068): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11734 suid=74 rport=52418 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043229.755:3069): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52418 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043229.755:3070): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52418 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043229.762:3071): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.762:3072): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11734 suid=74 rport=52418 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043229.763:3073): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043229.763:3074): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043229.763:3075): pid=11732 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=5 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043229.903:3076): pid=11732 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043229.924:3077): pid=11732 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043229.967:3078): pid=11732 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043229.967:3079): pid=11732 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.969:3080): pid=11736 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.970:3081): pid=11736 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.970:3082): pid=11736 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043229.971:3083): pid=11736 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043229.993:3084): pid=11732 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043229.993:3085): pid=11732 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043229.993:3086): pid=11732 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043229.993:3087): pid=11732 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.993:3088): pid=11732 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.993:3089): pid=11732 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.993:3090): pid=11732 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043229.994:3091): pid=11732 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11732 suid=0 rport=52418 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043230.007:3092): pid=11748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043230.007:3093): pid=11748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043230.007:3094): pid=11748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043230.009:3095): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11748 suid=74 rport=52420 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043230.009:3096): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11748 suid=74 rport=52420 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043230.065:3097): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52420 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043230.065:3098): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52420 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043230.071:3099): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043230.072:3100): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11748 suid=74 rport=52420 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043230.073:3101): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043230.073:3102): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043230.074:3103): pid=11747 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=6 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043230.218:3104): pid=11747 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043230.224:3105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043230.224:3106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043230.227:3107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043230.243:3108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043230.246:3109): pid=11747 uid=0 auid=0 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043230.288:3110): pid=11747 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043230.288:3111): pid=11747 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043230.290:3112): pid=11753 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043230.290:3113): pid=11753 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043230.290:3114): pid=11753 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043230.291:3115): pid=11753 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043233.657:3116): pid=11747 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043233.657:3117): pid=11747 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043233.658:3118): pid=11747 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043233.658:3119): pid=11747 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043233.658:3120): pid=11747 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043233.658:3121): pid=11747 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043233.658:3122): pid=11747 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043233.658:3123): pid=11747 uid=0 auid=0 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11747 suid=0 rport=52420 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043233.676:3124): pid=11929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11929 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043233.676:3125): pid=11929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11929 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043233.677:3126): pid=11929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11929 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043233.679:3127): pid=11928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11929 suid=74 rport=52476 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043233.679:3128): pid=11928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11929 suid=74 rport=52476 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043233.735:3129): pid=11928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52476 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043233.735:3130): pid=11928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52476 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043233.743:3131): pid=11928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043233.744:3132): pid=11928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11929 suid=74 rport=52476 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043233.745:3133): pid=11928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043233.746:3134): pid=11928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043233.746:3135): pid=11928 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=7 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043233.894:3136): pid=11928 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043233.924:3137): pid=11928 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043233.967:3138): pid=11928 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043233.967:3139): pid=11928 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043233.969:3140): pid=11931 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043233.969:3141): pid=11931 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043233.969:3142): pid=11931 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043233.970:3143): pid=11931 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043235.190:3144): pid=11928 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043235.191:3145): pid=11928 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043235.191:3146): pid=11928 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043235.191:3147): pid=11928 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.191:3148): pid=11928 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.191:3149): pid=11928 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.192:3150): pid=11928 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.192:3151): pid=11928 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11928 suid=0 rport=52476 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.206:3152): pid=11944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.206:3153): pid=11944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.206:3154): pid=11944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043235.208:3155): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11944 suid=74 rport=52478 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043235.208:3156): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11944 suid=74 rport=52478 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043235.264:3157): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52478 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043235.264:3158): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52478 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043235.270:3159): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.270:3160): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11944 suid=74 rport=52478 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043235.271:3161): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043235.272:3162): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043235.272:3163): pid=11939 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=8 res=1 >type=SERVICE_START msg=audit(1538043235.318:3164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043235.318:3165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043235.321:3166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043235.342:3167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538043235.417:3168): pid=11939 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043235.436:3169): pid=11939 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043235.479:3170): pid=11939 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043235.479:3171): pid=11939 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.481:3172): pid=11949 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.481:3173): pid=11949 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.481:3174): pid=11949 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043235.482:3175): pid=11949 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043235.499:3176): pid=11939 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043235.499:3177): pid=11939 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043235.500:3178): pid=11939 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043235.500:3179): pid=11939 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.500:3180): pid=11939 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.500:3181): pid=11939 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.500:3182): pid=11939 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.500:3183): pid=11939 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11939 suid=0 rport=52478 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.733:3184): pid=11962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.733:3185): pid=11962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.733:3186): pid=11962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043235.735:3187): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11962 suid=74 rport=52480 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043235.735:3188): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11962 suid=74 rport=52480 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.744:3189): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11962 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.744:3190): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11962 suid=74 rport=52480 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.744:3191): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.744:3192): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.744:3193): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538043235.744:3194): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043235.745:3195): pid=11963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.745:3196): pid=11963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.745:3197): pid=11963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043235.745:3198): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11963 suid=74 rport=52484 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043235.745:3199): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11963 suid=74 rport=52484 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.755:3200): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11963 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.755:3201): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11963 suid=74 rport=52484 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.756:3202): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.756:3203): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.756:3204): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538043235.756:3205): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043235.756:3206): pid=11964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.757:3207): pid=11964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.757:3208): pid=11964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043235.757:3209): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11964 suid=74 rport=52482 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043235.757:3210): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11964 suid=74 rport=52482 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.765:3211): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11964 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.765:3212): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11964 suid=74 rport=52482 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.766:3213): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11960 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.766:3214): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11960 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.766:3215): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11960 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538043235.766:3216): pid=11960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043235.794:3217): pid=11967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.795:3218): pid=11967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.795:3219): pid=11967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043235.796:3220): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11967 suid=74 rport=52486 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043235.796:3221): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11967 suid=74 rport=52486 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043235.856:3222): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52486 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043235.856:3223): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52486 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043235.863:3224): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043235.864:3225): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11967 suid=74 rport=52486 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043235.865:3226): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043235.865:3227): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043235.866:3228): pid=11966 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=9 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043236.010:3229): pid=11966 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043236.033:3230): pid=11966 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043236.076:3231): pid=11966 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043236.076:3232): pid=11966 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.078:3233): pid=11969 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.078:3234): pid=11969 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.078:3235): pid=11969 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043236.079:3236): pid=11969 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043236.113:3237): pid=11966 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043236.113:3238): pid=11966 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043236.113:3239): pid=11966 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043236.113:3240): pid=11966 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.113:3241): pid=11966 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.114:3242): pid=11966 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.114:3243): pid=11966 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.114:3244): pid=11966 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11966 suid=0 rport=52486 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.128:3245): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.128:3246): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.129:3247): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043236.130:3248): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11977 suid=74 rport=52488 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043236.130:3249): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11977 suid=74 rport=52488 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043236.186:3250): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52488 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043236.186:3251): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52488 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043236.191:3252): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.192:3253): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11977 suid=74 rport=52488 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043236.194:3254): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043236.195:3255): pid=11976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043236.195:3256): pid=11976 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=10 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043236.413:3257): pid=11976 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043236.439:3258): pid=11976 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043236.484:3259): pid=11976 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043236.484:3260): pid=11976 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.487:3261): pid=11979 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.487:3262): pid=11979 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.487:3263): pid=11979 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043236.489:3264): pid=11979 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043236.520:3265): pid=11976 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043236.520:3266): pid=11976 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043236.521:3267): pid=11976 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043236.521:3268): pid=11976 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.522:3269): pid=11976 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.522:3270): pid=11976 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.522:3271): pid=11976 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.522:3272): pid=11976 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11976 suid=0 rport=52488 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.537:3273): pid=11987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.537:3274): pid=11987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.537:3275): pid=11987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043236.539:3276): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11987 suid=74 rport=52490 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043236.539:3277): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11987 suid=74 rport=52490 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043236.594:3278): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52490 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043236.594:3279): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52490 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043236.603:3280): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.604:3281): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11987 suid=74 rport=52490 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043236.606:3282): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043236.606:3283): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043236.606:3284): pid=11985 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=11 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043236.773:3285): pid=11985 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043236.812:3286): pid=11985 uid=0 auid=0 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043236.854:3287): pid=11985 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043236.854:3288): pid=11985 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.855:3289): pid=11989 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.856:3290): pid=11989 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.856:3291): pid=11989 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043236.858:3292): pid=11989 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043236.896:3293): pid=11985 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043236.896:3294): pid=11985 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043236.897:3295): pid=11985 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043236.897:3296): pid=11985 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.897:3297): pid=11985 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.897:3298): pid=11985 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.897:3299): pid=11985 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.897:3300): pid=11985 uid=0 auid=0 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11985 suid=0 rport=52490 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.919:3301): pid=11997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.919:3302): pid=11997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.919:3303): pid=11997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043236.920:3304): pid=11996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11997 suid=74 rport=52492 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043236.920:3305): pid=11996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=11997 suid=74 rport=52492 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043236.975:3306): pid=11996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52492 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043236.975:3307): pid=11996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52492 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043236.982:3308): pid=11996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043236.982:3309): pid=11996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11997 suid=74 rport=52492 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043236.983:3310): pid=11996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043236.984:3311): pid=11996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043236.984:3312): pid=11996 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=12 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043237.125:3313): pid=11996 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043237.166:3314): pid=11996 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043237.209:3315): pid=11996 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043237.209:3316): pid=11996 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.212:3317): pid=11999 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.212:3318): pid=11999 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.212:3319): pid=11999 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043237.215:3320): pid=11999 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043237.237:3321): pid=11996 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043237.237:3322): pid=11996 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043237.237:3323): pid=11996 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043237.238:3324): pid=11996 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.238:3325): pid=11996 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=11996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.238:3326): pid=11996 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=11996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.238:3327): pid=11996 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=11996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.238:3328): pid=11996 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11996 suid=0 rport=52492 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.587:3329): pid=12010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.587:3330): pid=12010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.588:3331): pid=12010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043237.590:3332): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12010 suid=74 rport=52494 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043237.590:3333): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12010 suid=74 rport=52494 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043237.647:3334): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52494 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043237.647:3335): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52494 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043237.654:3336): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.654:3337): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12010 suid=74 rport=52494 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043237.656:3338): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043237.656:3339): pid=12009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043237.656:3340): pid=12009 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=13 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043237.802:3341): pid=12009 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043237.840:3342): pid=12009 uid=0 auid=0 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043237.881:3343): pid=12009 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043237.881:3344): pid=12009 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.884:3345): pid=12012 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.884:3346): pid=12012 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.884:3347): pid=12012 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043237.886:3348): pid=12012 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043237.912:3349): pid=12009 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043237.912:3350): pid=12009 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043237.913:3351): pid=12009 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043237.913:3352): pid=12009 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.913:3353): pid=12009 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.913:3354): pid=12009 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.913:3355): pid=12009 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12009 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.913:3356): pid=12009 uid=0 auid=0 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12009 suid=0 rport=52494 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.932:3357): pid=12023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.932:3358): pid=12023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.932:3359): pid=12023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043237.933:3360): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12023 suid=74 rport=52496 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043237.933:3361): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12023 suid=74 rport=52496 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043237.990:3362): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52496 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043237.990:3363): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52496 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043237.998:3364): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043237.998:3365): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12023 suid=74 rport=52496 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043238.000:3366): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043238.000:3367): pid=12022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043238.000:3368): pid=12022 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=14 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043238.140:3369): pid=12022 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043238.161:3370): pid=12022 uid=0 auid=0 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043238.203:3371): pid=12022 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043238.203:3372): pid=12022 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.205:3373): pid=12025 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.205:3374): pid=12025 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.205:3375): pid=12025 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043238.206:3376): pid=12025 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043238.229:3377): pid=12022 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043238.229:3378): pid=12022 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043238.229:3379): pid=12022 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043238.229:3380): pid=12022 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.230:3381): pid=12022 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.230:3382): pid=12022 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.230:3383): pid=12022 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.230:3384): pid=12022 uid=0 auid=0 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12022 suid=0 rport=52496 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.249:3385): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.249:3386): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.250:3387): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043238.251:3388): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12036 suid=74 rport=52498 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043238.251:3389): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12036 suid=74 rport=52498 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043238.350:3390): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52498 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043238.350:3391): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52498 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043238.358:3392): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.359:3393): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12036 suid=74 rport=52498 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043238.361:3394): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043238.361:3395): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043238.361:3396): pid=12035 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=15 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043238.501:3397): pid=12035 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043238.521:3398): pid=12035 uid=0 auid=0 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043238.562:3399): pid=12035 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043238.562:3400): pid=12035 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.564:3401): pid=12038 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.564:3402): pid=12038 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.564:3403): pid=12038 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043238.566:3404): pid=12038 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043238.908:3405): pid=12035 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043238.909:3406): pid=12035 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043238.909:3407): pid=12035 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043238.909:3408): pid=12035 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.909:3409): pid=12035 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.909:3410): pid=12035 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.909:3411): pid=12035 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.910:3412): pid=12035 uid=0 auid=0 ses=15 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12035 suid=0 rport=52498 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.923:3413): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.923:3414): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.923:3415): pid=12048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043238.925:3416): pid=12047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12048 suid=74 rport=52500 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043238.925:3417): pid=12047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12048 suid=74 rport=52500 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043238.983:3418): pid=12047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52500 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043238.983:3419): pid=12047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52500 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043238.988:3420): pid=12047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043238.989:3421): pid=12047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12048 suid=74 rport=52500 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043238.990:3422): pid=12047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043238.990:3423): pid=12047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043238.990:3424): pid=12047 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=16 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043239.132:3425): pid=12047 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043239.154:3426): pid=12047 uid=0 auid=0 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043239.196:3427): pid=12047 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043239.196:3428): pid=12047 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.198:3429): pid=12050 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.198:3430): pid=12050 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.198:3431): pid=12050 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043239.199:3432): pid=12050 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043239.221:3433): pid=12047 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043239.221:3434): pid=12047 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043239.221:3435): pid=12047 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043239.221:3436): pid=12047 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.222:3437): pid=12047 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.222:3438): pid=12047 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.222:3439): pid=12047 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.222:3440): pid=12047 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12047 suid=0 rport=52500 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.252:3441): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.252:3442): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.252:3443): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043239.254:3444): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12063 suid=74 rport=52502 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043239.254:3445): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12063 suid=74 rport=52502 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043239.310:3446): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52502 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043239.310:3447): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52502 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043239.319:3448): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.319:3449): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12063 suid=74 rport=52502 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043239.321:3450): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043239.322:3451): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043239.322:3452): pid=12062 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=17 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043239.463:3453): pid=12062 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043239.489:3454): pid=12062 uid=0 auid=0 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043239.530:3455): pid=12062 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043239.530:3456): pid=12062 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.532:3457): pid=12065 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12065 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.533:3458): pid=12065 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12065 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.533:3459): pid=12065 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12065 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043239.535:3460): pid=12065 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043239.564:3461): pid=12062 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043239.564:3462): pid=12062 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043239.564:3463): pid=12062 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043239.564:3464): pid=12062 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.565:3465): pid=12062 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.565:3466): pid=12062 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.565:3467): pid=12062 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043239.565:3468): pid=12062 uid=0 auid=0 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12062 suid=0 rport=52502 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043240.568:3469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043240.568:3470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043240.570:3471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043240.581:3472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043242.601:3473): pid=12119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043242.601:3474): pid=12119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043242.601:3475): pid=12119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043242.603:3476): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12119 suid=74 rport=52548 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043242.603:3477): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12119 suid=74 rport=52548 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043242.660:3478): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52548 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043242.660:3479): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52548 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043242.669:3480): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043242.670:3481): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12119 suid=74 rport=52548 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043242.671:3482): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043242.671:3483): pid=12118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043242.671:3484): pid=12118 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=18 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043242.812:3485): pid=12118 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043242.829:3486): pid=12118 uid=0 auid=0 ses=18 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043242.870:3487): pid=12118 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043242.870:3488): pid=12118 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043242.871:3489): pid=12141 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043242.871:3490): pid=12141 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043242.871:3491): pid=12141 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043242.872:3492): pid=12141 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043242.892:3493): pid=12118 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043242.893:3494): pid=12118 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043242.893:3495): pid=12118 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043242.893:3496): pid=12118 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043242.893:3497): pid=12118 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043242.893:3498): pid=12118 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043242.893:3499): pid=12118 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043242.893:3500): pid=12118 uid=0 auid=0 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12118 suid=0 rport=52548 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043245.601:3501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043245.601:3502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043245.603:3503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043245.613:3504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043245.924:3505): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043245.924:3506): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043245.924:3507): pid=12326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12326 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043245.925:3508): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12326 suid=74 rport=52556 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043245.926:3509): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12326 suid=74 rport=52556 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043245.981:3510): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52556 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043245.981:3511): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52556 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043245.987:3512): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043245.988:3513): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12326 suid=74 rport=52556 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043245.989:3514): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043245.989:3515): pid=12325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043245.989:3516): pid=12325 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=19 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043246.138:3517): pid=12325 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043246.155:3518): pid=12325 uid=0 auid=0 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043246.198:3519): pid=12325 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043246.198:3520): pid=12325 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043246.200:3521): pid=12328 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043246.200:3522): pid=12328 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043246.200:3523): pid=12328 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043246.202:3524): pid=12328 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043246.221:3525): pid=12325 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043246.222:3526): pid=12325 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043246.222:3527): pid=12325 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043246.222:3528): pid=12325 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043246.222:3529): pid=12325 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043246.222:3530): pid=12325 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043246.223:3531): pid=12325 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043246.223:3532): pid=12325 uid=0 auid=0 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12325 suid=0 rport=52556 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043249.250:3533): pid=12336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043249.250:3534): pid=12336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043249.250:3535): pid=12336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043249.252:3536): pid=12335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12336 suid=74 rport=52558 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043249.252:3537): pid=12335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12336 suid=74 rport=52558 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043249.309:3538): pid=12335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52558 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043249.309:3539): pid=12335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52558 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043249.315:3540): pid=12335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043249.316:3541): pid=12335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12336 suid=74 rport=52558 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043249.319:3542): pid=12335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043249.319:3543): pid=12335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043249.319:3544): pid=12335 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=20 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043249.457:3545): pid=12335 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043249.475:3546): pid=12335 uid=0 auid=0 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043249.517:3547): pid=12335 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043249.517:3548): pid=12335 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043249.519:3549): pid=12338 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043249.519:3550): pid=12338 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043249.519:3551): pid=12338 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043249.520:3552): pid=12338 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043249.540:3553): pid=12335 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043249.540:3554): pid=12335 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043249.541:3555): pid=12335 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043249.541:3556): pid=12335 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043249.541:3557): pid=12335 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043249.541:3558): pid=12335 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043249.541:3559): pid=12335 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043249.541:3560): pid=12335 uid=0 auid=0 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12335 suid=0 rport=52558 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043250.817:3561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043250.817:3562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043250.818:3563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043250.829:3564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043252.568:3565): pid=12366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12366 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043252.569:3566): pid=12366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12366 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043252.569:3567): pid=12366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12366 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043252.570:3568): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12366 suid=74 rport=52560 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043252.570:3569): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12366 suid=74 rport=52560 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043252.627:3570): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52560 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043252.627:3571): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52560 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043252.633:3572): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043252.633:3573): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12366 suid=74 rport=52560 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043252.634:3574): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043252.634:3575): pid=12365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043252.634:3576): pid=12365 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=21 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043252.775:3577): pid=12365 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043252.792:3578): pid=12365 uid=0 auid=0 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043252.834:3579): pid=12365 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043252.834:3580): pid=12365 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043252.836:3581): pid=12368 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043252.836:3582): pid=12368 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043252.836:3583): pid=12368 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043252.837:3584): pid=12368 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043252.856:3585): pid=12365 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043252.856:3586): pid=12365 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043252.856:3587): pid=12365 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043252.856:3588): pid=12365 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043252.857:3589): pid=12365 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043252.857:3590): pid=12365 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043252.857:3591): pid=12365 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043252.857:3592): pid=12365 uid=0 auid=0 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12365 suid=0 rport=52560 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043255.884:3593): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043255.884:3594): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043255.884:3595): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043255.886:3596): pid=12375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12376 suid=74 rport=52562 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043255.886:3597): pid=12375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12376 suid=74 rport=52562 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043255.943:3598): pid=12375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52562 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043255.943:3599): pid=12375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52562 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043255.948:3600): pid=12375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043255.949:3601): pid=12375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12376 suid=74 rport=52562 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043255.950:3602): pid=12375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043255.950:3603): pid=12375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043255.951:3604): pid=12375 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=22 res=1 >type=SERVICE_START msg=audit(1538043256.068:3605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043256.068:3606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043256.070:3607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043256.083:3608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538043256.100:3609): pid=12375 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043256.114:3610): pid=12375 uid=0 auid=0 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043256.156:3611): pid=12375 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043256.156:3612): pid=12375 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043256.158:3613): pid=12381 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12381 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043256.158:3614): pid=12381 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12381 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043256.158:3615): pid=12381 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12381 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043256.159:3616): pid=12381 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043256.178:3617): pid=12375 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043256.178:3618): pid=12375 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043256.179:3619): pid=12375 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043256.179:3620): pid=12375 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043256.179:3621): pid=12375 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12375 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043256.179:3622): pid=12375 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12375 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043256.179:3623): pid=12375 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12375 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043256.179:3624): pid=12375 uid=0 auid=0 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12375 suid=0 rport=52562 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043259.205:3625): pid=12389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043259.205:3626): pid=12389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043259.205:3627): pid=12389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043259.207:3628): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12389 suid=74 rport=52564 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043259.207:3629): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12389 suid=74 rport=52564 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043259.263:3630): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52564 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043259.263:3631): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52564 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043259.270:3632): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043259.271:3633): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12389 suid=74 rport=52564 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043259.272:3634): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043259.272:3635): pid=12388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043259.272:3636): pid=12388 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=23 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043259.412:3637): pid=12388 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043259.428:3638): pid=12388 uid=0 auid=0 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043259.471:3639): pid=12388 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043259.471:3640): pid=12388 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043259.473:3641): pid=12391 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043259.473:3642): pid=12391 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043259.473:3643): pid=12391 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043259.475:3644): pid=12391 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043259.494:3645): pid=12388 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043259.495:3646): pid=12388 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043259.495:3647): pid=12388 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043259.495:3648): pid=12388 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043259.495:3649): pid=12388 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043259.495:3650): pid=12388 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043259.495:3651): pid=12388 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043259.495:3652): pid=12388 uid=0 auid=0 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12388 suid=0 rport=52564 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043261.317:3653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043261.318:3654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043261.318:3655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043261.328:3656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043262.526:3657): pid=12402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043262.526:3658): pid=12402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043262.526:3659): pid=12402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043262.527:3660): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12402 suid=74 rport=52566 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043262.527:3661): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12402 suid=74 rport=52566 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043262.584:3662): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52566 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043262.584:3663): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52566 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043262.590:3664): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043262.591:3665): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12402 suid=74 rport=52566 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043262.592:3666): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043262.592:3667): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043262.593:3668): pid=12401 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=24 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043262.736:3669): pid=12401 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043262.753:3670): pid=12401 uid=0 auid=0 ses=24 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043262.795:3671): pid=12401 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043262.795:3672): pid=12401 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043262.797:3673): pid=12404 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043262.797:3674): pid=12404 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043262.797:3675): pid=12404 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043262.798:3676): pid=12404 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043262.819:3677): pid=12401 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043262.819:3678): pid=12401 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043262.820:3679): pid=12401 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043262.820:3680): pid=12401 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043262.820:3681): pid=12401 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043262.820:3682): pid=12401 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043262.820:3683): pid=12401 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043262.820:3684): pid=12401 uid=0 auid=0 ses=24 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12401 suid=0 rport=52566 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043265.849:3685): pid=12412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043265.849:3686): pid=12412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043265.849:3687): pid=12412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043265.851:3688): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12412 suid=74 rport=52568 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043265.851:3689): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12412 suid=74 rport=52568 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043265.908:3690): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52568 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043265.908:3691): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52568 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043265.915:3692): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043265.915:3693): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12412 suid=74 rport=52568 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043265.917:3694): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043265.917:3695): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043265.917:3696): pid=12411 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=25 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043266.057:3697): pid=12411 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043266.073:3698): pid=12411 uid=0 auid=0 ses=25 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043266.115:3699): pid=12411 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043266.115:3700): pid=12411 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043266.117:3701): pid=12414 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043266.118:3702): pid=12414 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043266.118:3703): pid=12414 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043266.119:3704): pid=12414 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043266.137:3705): pid=12411 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043266.137:3706): pid=12411 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043266.137:3707): pid=12411 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043266.137:3708): pid=12411 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043266.137:3709): pid=12411 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043266.137:3710): pid=12411 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043266.137:3711): pid=12411 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043266.138:3712): pid=12411 uid=0 auid=0 ses=25 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12411 suid=0 rport=52568 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043266.567:3713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043266.567:3714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043266.568:3715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043266.579:3716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043269.170:3717): pid=12425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043269.171:3718): pid=12425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043269.171:3719): pid=12425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043269.172:3720): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12425 suid=74 rport=52570 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043269.172:3721): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12425 suid=74 rport=52570 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043269.229:3722): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52570 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043269.229:3723): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52570 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043269.235:3724): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043269.235:3725): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12425 suid=74 rport=52570 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043269.237:3726): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043269.237:3727): pid=12424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043269.237:3728): pid=12424 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=26 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043269.385:3729): pid=12424 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043269.401:3730): pid=12424 uid=0 auid=0 ses=26 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043269.443:3731): pid=12424 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043269.443:3732): pid=12424 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043269.445:3733): pid=12427 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043269.445:3734): pid=12427 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043269.445:3735): pid=12427 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043269.446:3736): pid=12427 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043269.466:3737): pid=12424 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043269.466:3738): pid=12424 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043269.466:3739): pid=12424 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043269.467:3740): pid=12424 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043269.467:3741): pid=12424 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043269.467:3742): pid=12424 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043269.467:3743): pid=12424 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043269.467:3744): pid=12424 uid=0 auid=0 ses=26 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12424 suid=0 rport=52570 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043271.817:3745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043271.817:3746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043271.818:3747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043271.828:3748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043272.500:3749): pid=12438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043272.500:3750): pid=12438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043272.501:3751): pid=12438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043272.502:3752): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12438 suid=74 rport=52572 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043272.502:3753): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12438 suid=74 rport=52572 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043272.560:3754): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52572 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043272.560:3755): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52572 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043272.566:3756): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043272.567:3757): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12438 suid=74 rport=52572 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043272.568:3758): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043272.568:3759): pid=12437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043272.568:3760): pid=12437 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=27 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043272.714:3761): pid=12437 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043272.729:3762): pid=12437 uid=0 auid=0 ses=27 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043272.771:3763): pid=12437 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043272.771:3764): pid=12437 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043272.773:3765): pid=12440 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043272.773:3766): pid=12440 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043272.773:3767): pid=12440 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043272.774:3768): pid=12440 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043272.795:3769): pid=12437 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043272.795:3770): pid=12437 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043272.796:3771): pid=12437 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043272.796:3772): pid=12437 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043272.796:3773): pid=12437 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043272.796:3774): pid=12437 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043272.796:3775): pid=12437 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043272.796:3776): pid=12437 uid=0 auid=0 ses=27 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12437 suid=0 rport=52572 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043275.823:3777): pid=12448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043275.824:3778): pid=12448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043275.824:3779): pid=12448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043275.825:3780): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12448 suid=74 rport=52574 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043275.825:3781): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12448 suid=74 rport=52574 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043275.881:3782): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52574 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043275.881:3783): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52574 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043275.886:3784): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043275.887:3785): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12448 suid=74 rport=52574 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043275.888:3786): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043275.888:3787): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043275.888:3788): pid=12447 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=28 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043276.030:3789): pid=12447 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043276.046:3790): pid=12447 uid=0 auid=0 ses=28 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043276.088:3791): pid=12447 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043276.088:3792): pid=12447 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043276.090:3793): pid=12450 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043276.090:3794): pid=12450 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043276.090:3795): pid=12450 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043276.091:3796): pid=12450 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043276.111:3797): pid=12447 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043276.111:3798): pid=12447 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043276.112:3799): pid=12447 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043276.112:3800): pid=12447 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043276.112:3801): pid=12447 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043276.112:3802): pid=12447 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043276.112:3803): pid=12447 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043276.112:3804): pid=12447 uid=0 auid=0 ses=28 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12447 suid=0 rport=52574 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043277.067:3805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043277.067:3806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043277.068:3807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043277.078:3808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=MAC_CONFIG_CHANGE msg=audit(1538043278.510:3809): bool=virt_use_nfs val=1 old_val=0 auid=0 ses=16 >type=SYSCALL msg=audit(1538043278.510:3809): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7ffede3bd040 a2=2 a3=7ffede3bcaa0 items=0 ppid=12479 pid=12480 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043278.510:3809): proctitle=2F7573722F7362696E2F7365747365626F6F6C002D50002D4E00766972745F7573655F6E66733D3100766972745F73616E64626F785F7573655F616C6C5F636170733D31 >type=USER_AVC msg=audit(1538043278.517:3810): pid=2252 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=3) exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' >type=CRYPTO_KEY_USER msg=audit(1538043279.153:3811): pid=12491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043279.153:3812): pid=12491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043279.153:3813): pid=12491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12491 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043279.155:3814): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12491 suid=74 rport=52580 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043279.155:3815): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12491 suid=74 rport=52580 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043279.211:3816): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52580 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043279.212:3817): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52580 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043279.219:3818): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043279.220:3819): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12491 suid=74 rport=52580 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043279.222:3820): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043279.222:3821): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043279.222:3822): pid=12490 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=29 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043279.379:3823): pid=12490 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_AVC msg=audit(1538043279.394:3824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=3) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1538043279.403:3825): pid=12490 uid=0 auid=0 ses=29 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043279.445:3826): pid=12490 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043279.445:3827): pid=12490 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043279.446:3828): pid=12494 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043279.447:3829): pid=12494 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043279.447:3830): pid=12494 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12494 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043279.448:3831): pid=12494 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043279.469:3832): pid=12490 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043279.469:3833): pid=12490 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043279.469:3834): pid=12490 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043279.470:3835): pid=12490 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043279.470:3836): pid=12490 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043279.470:3837): pid=12490 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043279.470:3838): pid=12490 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043279.470:3839): pid=12490 uid=0 auid=0 ses=29 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12490 suid=0 rport=52580 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043282.317:3840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043282.317:3841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043282.318:3842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043282.330:3843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043282.501:3844): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043282.501:3845): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043282.501:3846): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043282.502:3847): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12505 suid=74 rport=52582 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043282.503:3848): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12505 suid=74 rport=52582 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043282.562:3849): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52582 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043282.562:3850): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52582 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043282.567:3851): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043282.568:3852): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12505 suid=74 rport=52582 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043282.569:3853): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043282.569:3854): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043282.569:3855): pid=12504 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=30 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043282.711:3856): pid=12504 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043282.736:3857): pid=12504 uid=0 auid=0 ses=30 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043282.778:3858): pid=12504 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043282.779:3859): pid=12504 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043282.780:3860): pid=12507 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043282.780:3861): pid=12507 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043282.780:3862): pid=12507 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043282.781:3863): pid=12507 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043282.808:3864): pid=12504 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043282.808:3865): pid=12504 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043282.808:3866): pid=12504 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043282.809:3867): pid=12504 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043282.809:3868): pid=12504 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043282.809:3869): pid=12504 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043282.809:3870): pid=12504 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043282.809:3871): pid=12504 uid=0 auid=0 ses=30 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12504 suid=0 rport=52582 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043285.858:3872): pid=12516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12516 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043285.858:3873): pid=12516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12516 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043285.858:3874): pid=12516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12516 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043285.860:3875): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12516 suid=74 rport=52584 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043285.860:3876): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12516 suid=74 rport=52584 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043285.916:3877): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52584 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043285.916:3878): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52584 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043285.924:3879): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043285.924:3880): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12516 suid=74 rport=52584 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043285.926:3881): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043285.926:3882): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043285.926:3883): pid=12515 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=31 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043286.068:3884): pid=12515 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043286.085:3885): pid=12515 uid=0 auid=0 ses=31 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043286.129:3886): pid=12515 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043286.129:3887): pid=12515 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043286.130:3888): pid=12518 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043286.131:3889): pid=12518 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043286.131:3890): pid=12518 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043286.132:3891): pid=12518 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043286.152:3892): pid=12515 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043286.152:3893): pid=12515 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043286.152:3894): pid=12515 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043286.153:3895): pid=12515 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043286.153:3896): pid=12515 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043286.153:3897): pid=12515 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043286.153:3898): pid=12515 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043286.153:3899): pid=12515 uid=0 auid=0 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12515 suid=0 rport=52584 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043287.567:3900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043287.567:3901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043287.569:3902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043287.581:3903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043289.188:3904): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043289.188:3905): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043289.189:3906): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043289.190:3907): pid=12528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12529 suid=74 rport=52586 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043289.190:3908): pid=12528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12529 suid=74 rport=52586 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043289.247:3909): pid=12528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52586 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043289.248:3910): pid=12528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52586 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043289.256:3911): pid=12528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043289.257:3912): pid=12528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12529 suid=74 rport=52586 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043289.258:3913): pid=12528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043289.259:3914): pid=12528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043289.259:3915): pid=12528 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=32 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043289.404:3916): pid=12528 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043289.420:3917): pid=12528 uid=0 auid=0 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043289.462:3918): pid=12528 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043289.462:3919): pid=12528 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043289.464:3920): pid=12531 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043289.464:3921): pid=12531 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043289.464:3922): pid=12531 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043289.466:3923): pid=12531 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043289.493:3924): pid=12528 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043289.494:3925): pid=12528 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043289.495:3926): pid=12528 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043289.495:3927): pid=12528 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043289.495:3928): pid=12528 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043289.496:3929): pid=12528 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043289.496:3930): pid=12528 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12528 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043289.496:3931): pid=12528 uid=0 auid=0 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12528 suid=0 rport=52586 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043292.523:3932): pid=12544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043292.523:3933): pid=12544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043292.523:3934): pid=12544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043292.524:3935): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12544 suid=74 rport=52588 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043292.525:3936): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12544 suid=74 rport=52588 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043292.583:3937): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52588 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043292.583:3938): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52588 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043292.588:3939): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043292.589:3940): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12544 suid=74 rport=52588 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043292.590:3941): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043292.590:3942): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043292.590:3943): pid=12543 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=33 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043292.731:3944): pid=12543 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043292.737:3945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043292.737:3946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043292.739:3947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043292.747:3948): pid=12543 uid=0 auid=0 ses=33 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_STOP msg=audit(1538043292.755:3949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_LOGIN msg=audit(1538043292.789:3950): pid=12543 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043292.789:3951): pid=12543 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043292.791:3952): pid=12549 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043292.791:3953): pid=12549 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043292.791:3954): pid=12549 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043292.792:3955): pid=12549 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043292.820:3956): pid=12543 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043292.820:3957): pid=12543 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043292.821:3958): pid=12543 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043292.821:3959): pid=12543 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043292.821:3960): pid=12543 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12543 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043292.822:3961): pid=12543 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12543 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043292.822:3962): pid=12543 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12543 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043292.822:3963): pid=12543 uid=0 auid=0 ses=33 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12543 suid=0 rport=52588 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AVC msg=audit(1538043293.501:3964): pid=2252 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=4) exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' >type=MAC_POLICY_LOAD msg=audit(1538043291.684:3965): policy loaded auid=0 ses=16 >type=SYSCALL msg=audit(1538043291.684:3965): arch=c000003e syscall=1 success=yes exit=3918428 a0=4 a1=7f0090a50000 a2=3bca5c a3=7ffd796f72a0 items=0 ppid=12479 pid=12539 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043291.684:3965): proctitle="/usr/sbin/load_policy" >type=SOFTWARE_UPDATE msg=audit(1538043293.552:3966): pid=12465 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="container-selinux-2:2.73-2.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_MAC_CONFIG_CHANGE msg=audit(1538043294.414:3967): pid=12572 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=4444 proto=6 tcontext=system_u:object_r:mysqld_port_t:s0 comm="semanage" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_MAC_CONFIG_CHANGE msg=audit(1538043295.122:3968): pid=12577 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=6653 proto=6 tcontext=system_u:object_r:openvswitch_port_t:s0 comm="semanage" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043295.853:3969): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12589 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043295.853:3970): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12589 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043295.853:3971): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12589 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043295.855:3972): pid=12588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12589 suid=74 rport=52590 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043295.855:3973): pid=12588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12589 suid=74 rport=52590 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043295.915:3974): pid=12588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52590 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043295.915:3975): pid=12588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52590 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043295.922:3976): pid=12588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043295.923:3977): pid=12588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12589 suid=74 rport=52590 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043295.925:3978): pid=12588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043295.925:3979): pid=12588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043295.925:3980): pid=12588 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=34 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043296.089:3981): pid=12588 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_AVC msg=audit(1538043296.100:3982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=4) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1538043296.109:3983): pid=12588 uid=0 auid=0 ses=34 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043296.153:3984): pid=12588 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043296.154:3985): pid=12588 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043296.156:3986): pid=12591 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043296.157:3987): pid=12591 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043296.157:3988): pid=12591 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043296.158:3989): pid=12591 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043296.181:3990): pid=12588 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043296.181:3991): pid=12588 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043296.182:3992): pid=12588 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043296.182:3993): pid=12588 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043296.182:3994): pid=12588 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043296.182:3995): pid=12588 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043296.183:3996): pid=12588 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043296.183:3997): pid=12588 uid=0 auid=0 ses=34 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12588 suid=0 rport=52590 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_MAC_CONFIG_CHANGE msg=audit(1538043296.584:3998): pid=12584 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=8088 proto=6 tcontext=system_u:object_r:http_port_t:s0 comm="semanage" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_MAC_CONFIG_CHANGE msg=audit(1538043297.553:3999): pid=12598 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=8000 proto=6 tcontext=system_u:object_r:http_port_t:s0 comm="semanage" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043297.816:4000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043297.816:4001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043297.818:4002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043297.831:4003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043299.220:4004): pid=12614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043299.220:4005): pid=12614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043299.220:4006): pid=12614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043299.223:4007): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12614 suid=74 rport=52592 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043299.223:4008): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12614 suid=74 rport=52592 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043299.323:4009): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52592 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043299.323:4010): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52592 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043299.331:4011): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043299.332:4012): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12614 suid=74 rport=52592 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043299.334:4013): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043299.334:4014): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043299.335:4015): pid=12613 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=35 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043299.484:4016): pid=12613 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043299.512:4017): pid=12613 uid=0 auid=0 ses=35 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043299.555:4018): pid=12613 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043299.556:4019): pid=12613 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043299.558:4020): pid=12617 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043299.558:4021): pid=12617 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043299.558:4022): pid=12617 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043299.559:4023): pid=12617 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043299.584:4024): pid=12613 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043299.585:4025): pid=12613 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043299.586:4026): pid=12613 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043299.586:4027): pid=12613 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043299.586:4028): pid=12613 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043299.586:4029): pid=12613 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043299.586:4030): pid=12613 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043299.587:4031): pid=12613 uid=0 auid=0 ses=35 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12613 suid=0 rport=52592 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_MAC_CONFIG_CHANGE msg=audit(1538043299.672:4032): pid=12608 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6639 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_MAC_CONFIG_CHANGE msg=audit(1538043300.986:4033): pid=12624 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6641 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043302.639:4034): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043302.639:4035): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043302.639:4036): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043302.641:4037): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12636 suid=74 rport=52594 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043302.641:4038): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12636 suid=74 rport=52594 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043302.732:4039): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52594 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043302.732:4040): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52594 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043302.739:4041): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043302.740:4042): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12636 suid=74 rport=52594 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043302.742:4043): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043302.742:4044): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043302.742:4045): pid=12635 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=36 res=1 >type=USER_MAC_CONFIG_CHANGE msg=audit(1538043302.869:4046): pid=12630 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6642 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043302.895:4047): pid=12635 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043302.904:4048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043302.904:4049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043302.909:4050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043302.935:4051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043302.941:4052): pid=12635 uid=0 auid=0 ses=36 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043302.986:4053): pid=12635 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043302.986:4054): pid=12635 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043302.987:4055): pid=12645 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043302.988:4056): pid=12645 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043302.988:4057): pid=12645 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043302.990:4058): pid=12645 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043303.019:4059): pid=12635 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043303.019:4060): pid=12635 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043303.020:4061): pid=12635 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043303.020:4062): pid=12635 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043303.020:4063): pid=12635 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12635 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043303.020:4064): pid=12635 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12635 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043303.020:4065): pid=12635 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12635 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043303.020:4066): pid=12635 uid=0 auid=0 ses=36 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12635 suid=0 rport=52594 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043306.061:4067): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043306.062:4068): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043306.062:4069): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043306.064:4070): pid=12652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12653 suid=74 rport=52596 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043306.064:4071): pid=12652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12653 suid=74 rport=52596 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043306.124:4072): pid=12652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52596 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043306.124:4073): pid=12652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52596 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043306.131:4074): pid=12652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043306.131:4075): pid=12652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12653 suid=74 rport=52596 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043306.133:4076): pid=12652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043306.133:4077): pid=12652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043306.133:4078): pid=12652 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=37 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043306.286:4079): pid=12652 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043306.301:4080): pid=12652 uid=0 auid=0 ses=37 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043306.344:4081): pid=12652 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043306.344:4082): pid=12652 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043306.346:4083): pid=12655 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043306.346:4084): pid=12655 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043306.347:4085): pid=12655 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043306.348:4086): pid=12655 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043306.372:4087): pid=12652 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043306.372:4088): pid=12652 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043306.373:4089): pid=12652 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043306.373:4090): pid=12652 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043306.374:4091): pid=12652 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043306.374:4092): pid=12652 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043306.374:4093): pid=12652 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043306.374:4094): pid=12652 uid=0 auid=0 ses=37 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12652 suid=0 rport=52596 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043308.067:4095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043308.067:4096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043308.069:4097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043308.080:4098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043309.417:4099): pid=12687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043309.417:4100): pid=12687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043309.418:4101): pid=12687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043309.420:4102): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12687 suid=74 rport=52598 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043309.421:4103): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12687 suid=74 rport=52598 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043309.499:4104): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52598 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043309.499:4105): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52598 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043309.507:4106): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043309.507:4107): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12687 suid=74 rport=52598 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043309.509:4108): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043309.509:4109): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043309.509:4110): pid=12686 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=38 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043309.662:4111): pid=12686 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043309.683:4112): pid=12686 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043309.728:4113): pid=12686 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043309.728:4114): pid=12686 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043309.732:4115): pid=12689 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043309.732:4116): pid=12689 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043309.732:4117): pid=12689 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043309.734:4118): pid=12689 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043309.767:4119): pid=12686 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043309.767:4120): pid=12686 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043309.768:4121): pid=12686 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043309.768:4122): pid=12686 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043309.769:4123): pid=12686 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043309.769:4124): pid=12686 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043309.769:4125): pid=12686 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043309.769:4126): pid=12686 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12686 suid=0 rport=52598 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043312.809:4127): pid=12697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12697 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043312.809:4128): pid=12697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12697 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043312.809:4129): pid=12697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12697 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043312.811:4130): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12697 suid=74 rport=52600 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043312.811:4131): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12697 suid=74 rport=52600 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043312.874:4132): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52600 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043312.874:4133): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52600 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043312.880:4134): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043312.881:4135): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12697 suid=74 rport=52600 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043312.883:4136): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043312.883:4137): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043312.884:4138): pid=12696 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=39 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043313.031:4139): pid=12696 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043313.051:4140): pid=12696 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043313.095:4141): pid=12696 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043313.095:4142): pid=12696 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043313.097:4143): pid=12699 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043313.097:4144): pid=12699 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043313.097:4145): pid=12699 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043313.098:4146): pid=12699 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043313.130:4147): pid=12696 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043313.130:4148): pid=12696 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043313.131:4149): pid=12696 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043313.131:4150): pid=12696 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043313.131:4151): pid=12696 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043313.131:4152): pid=12696 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043313.131:4153): pid=12696 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043313.131:4154): pid=12696 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12696 suid=0 rport=52600 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043313.134:4155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043313.135:4156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043313.136:4157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043313.145:4158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=httpd_execmem val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=httpd_can_network_connect val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=httpd_use_openstack val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=domain_kernel_load_modules val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=collectd_tcp_network_connect val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=glance_api_can_network val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=glance_use_fusefs val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=glance_use_execmem val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=daemons_enable_cluster_mode val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=neutron_can_network val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=haproxy_connect_any val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=rsync_client val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=rsync_full_access val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=swift_can_network val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=virt_use_execmem val=1 old_val=0 auid=0 ses=16 >type=MAC_CONFIG_CHANGE msg=audit(1538043315.147:4159): bool=virt_use_fusefs val=1 old_val=0 auid=0 ses=16 >type=SYSCALL msg=audit(1538043315.147:4159): arch=c000003e syscall=1 success=yes exit=2 a0=3d a1=7fff7987b2e0 a2=2 a3=3 items=0 ppid=12559 pid=12641 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="semanage" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043315.147:4159): proctitle=2F7573722F62696E2F707974686F6E002D4573002F7573722F7362696E2F73656D616E61676500696D706F7274002D4E >type=USER_AVC msg=audit(1538043315.159:4160): pid=2252 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=5) exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' >type=CRYPTO_KEY_USER msg=audit(1538043316.168:4161): pid=12716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043316.168:4162): pid=12716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043316.168:4163): pid=12716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043316.169:4164): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12716 suid=74 rport=52602 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043316.170:4165): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12716 suid=74 rport=52602 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043316.226:4166): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52602 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043316.226:4167): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52602 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043316.234:4168): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043316.235:4169): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12716 suid=74 rport=52602 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043316.237:4170): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043316.238:4171): pid=12715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043316.238:4172): pid=12715 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=40 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043316.479:4173): pid=12715 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_AVC msg=audit(1538043316.491:4174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=5) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1538043316.500:4175): pid=12715 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043316.544:4176): pid=12715 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043316.544:4177): pid=12715 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043316.547:4178): pid=12718 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043316.547:4179): pid=12718 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043316.547:4180): pid=12718 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043316.548:4181): pid=12718 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043316.578:4182): pid=12715 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043316.578:4183): pid=12715 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043316.579:4184): pid=12715 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043316.579:4185): pid=12715 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043316.579:4186): pid=12715 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12715 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043316.579:4187): pid=12715 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12715 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043316.579:4188): pid=12715 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12715 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043316.579:4189): pid=12715 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12715 suid=0 rport=52602 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043318.317:4190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043318.317:4191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043318.321:4192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043318.331:4193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043319.627:4194): pid=12736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043319.627:4195): pid=12736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043319.628:4196): pid=12736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043319.630:4197): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12736 suid=74 rport=52604 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043319.630:4198): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12736 suid=74 rport=52604 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043319.692:4199): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52604 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043319.692:4200): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52604 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043319.699:4201): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043319.702:4202): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12736 suid=74 rport=52604 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043319.703:4203): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043319.703:4204): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043319.703:4205): pid=12735 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=41 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043319.968:4206): pid=12735 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_AVC msg=audit(1538043319.976:4207): pid=2252 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=6) exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' >type=MAC_POLICY_LOAD msg=audit(1538043317.432:4208): policy loaded auid=0 ses=16 >type=SYSCALL msg=audit(1538043317.432:4208): arch=c000003e syscall=1 success=yes exit=3930026 a0=4 a1=7f3e8495b000 a2=3bf7aa a3=7ffeb70b0b60 items=0 ppid=12559 pid=12728 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043317.432:4208): proctitle="/usr/sbin/load_policy" >type=USER_AVC msg=audit(1538043319.990:4209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=6) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1538043320.002:4210): pid=12735 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043320.006:4211): pid=12465 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-selinux-0.8.14-14.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538043320.045:4212): pid=12735 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043320.045:4213): pid=12735 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043320.047:4214): pid=12749 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043320.047:4215): pid=12749 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043320.048:4216): pid=12749 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043320.049:4217): pid=12749 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043320.071:4218): pid=12735 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043320.071:4219): pid=12735 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043320.071:4220): pid=12735 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043320.071:4221): pid=12735 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043320.071:4222): pid=12735 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043320.071:4223): pid=12735 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043320.071:4224): pid=12735 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043320.071:4225): pid=12735 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12735 suid=0 rport=52604 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043321.695:4226): pid=12759 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-futures-3.1.1-5.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043323.008:4227): pid=12759 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="sos-3.6-9.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043323.123:4228): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043323.123:4229): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043323.123:4230): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043323.125:4231): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12774 suid=74 rport=52610 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043323.126:4232): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=12774 suid=74 rport=52610 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043323.181:4233): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52610 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043323.181:4234): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52610 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043323.189:4235): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043323.190:4236): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12774 suid=74 rport=52610 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043323.191:4237): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043323.191:4238): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043323.191:4239): pid=12773 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=42 res=1 >type=SERVICE_START msg=audit(1538043323.335:4240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043323.335:4241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043323.337:4242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043323.352:4243): pid=12773 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_STOP msg=audit(1538043323.357:4244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043323.377:4245): pid=12773 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043323.420:4246): pid=12773 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043323.420:4247): pid=12773 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043323.421:4248): pid=12794 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043323.421:4249): pid=12794 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043323.421:4250): pid=12794 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043323.422:4251): pid=12794 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043323.447:4252): pid=12773 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043323.447:4253): pid=12773 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043323.448:4254): pid=12773 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043323.448:4255): pid=12773 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043323.448:4256): pid=12773 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=12773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043323.449:4257): pid=12773 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=12773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043323.449:4258): pid=12773 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=12773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043323.449:4259): pid=12773 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12773 suid=0 rport=52610 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043324.950:4260): pid=12801 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="iptables-services-1.4.21-28.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538043325.316:4261): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1538043325.316:4261): arch=c000003e syscall=175 success=yes exit=0 a0=1c97fd0 a1=1da1 a2=41a94e a3=1c94300 items=0 ppid=12883 pid=12884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=PROCTITLE msg=audit(1538043325.316:4261): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F66696C746572 >type=NETFILTER_CFG msg=audit(1538043325.377:4262): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538043325.377:4262): arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=0 a2=40 a3=d96d40 items=0 ppid=12870 pid=12882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538043325.377:4262): proctitle=69707461626C65732D726573746F7265002D2D7761697400363030002F6574632F737973636F6E6669672F69707461626C6573 >type=SERVICE_START msg=audit(1538043325.393:4263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=iptables comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538043325.707:4264): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1538043325.707:4264): arch=c000003e syscall=175 success=yes exit=0 a0=1e97ff0 a1=1d91 a2=41a94e a3=1e94500 items=0 ppid=12991 pid=12992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=PROCTITLE msg=audit(1538043325.707:4264): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F66696C746572 >type=NETFILTER_CFG msg=audit(1538043325.712:4265): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538043325.712:4265): arch=c000003e syscall=54 success=yes exit=0 a0=5 a1=29 a2=40 a3=1c76d80 items=0 ppid=12974 pid=12987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538043325.712:4265): proctitle=6970367461626C65732D726573746F7265002D2D7761697400363030002F6574632F737973636F6E6669672F6970367461626C6573 >type=SERVICE_START msg=audit(1538043325.734:4266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ip6tables comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043326.494:4267): pid=13063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043326.495:4268): pid=13063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043326.495:4269): pid=13063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043326.498:4270): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13063 suid=74 rport=52614 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043326.498:4271): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13063 suid=74 rport=52614 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043326.599:4272): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52614 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043326.599:4273): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52614 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043326.609:4274): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043326.610:4275): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13063 suid=74 rport=52614 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043326.612:4276): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043326.613:4277): pid=13062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043326.613:4278): pid=13062 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=43 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043326.865:4279): pid=13062 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043326.894:4280): pid=13062 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043326.937:4281): pid=13062 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043326.937:4282): pid=13062 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043326.940:4283): pid=13065 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13065 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043326.941:4284): pid=13065 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13065 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043326.941:4285): pid=13065 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13065 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043326.942:4286): pid=13065 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043326.974:4287): pid=13062 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043326.974:4288): pid=13062 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043326.975:4289): pid=13062 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043326.975:4290): pid=13062 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043326.975:4291): pid=13062 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043326.975:4292): pid=13062 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043326.975:4293): pid=13062 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043326.975:4294): pid=13062 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13062 suid=0 rport=52614 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043330.017:4295): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043330.017:4296): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043330.018:4297): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043330.021:4298): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13085 suid=74 rport=52628 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043330.021:4299): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13085 suid=74 rport=52628 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043330.121:4300): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52628 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043330.121:4301): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52628 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043330.129:4302): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043330.130:4303): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13085 suid=74 rport=52628 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043330.133:4304): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043330.133:4305): pid=13084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043330.133:4306): pid=13084 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=44 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043330.365:4307): pid=13084 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043330.396:4308): pid=13084 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043330.438:4309): pid=13084 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043330.438:4310): pid=13084 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043330.439:4311): pid=13087 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043330.440:4312): pid=13087 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043330.440:4313): pid=13087 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043330.441:4314): pid=13087 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043330.468:4315): pid=13084 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043330.468:4316): pid=13084 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043330.469:4317): pid=13084 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043330.469:4318): pid=13084 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043330.469:4319): pid=13084 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043330.469:4320): pid=13084 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043330.469:4321): pid=13084 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043330.469:4322): pid=13084 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13084 suid=0 rport=52628 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043331.067:4323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043331.067:4324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043331.068:4325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043331.081:4326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043333.017:4327): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-parent-1:0.225-244.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.031:4328): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-HTTP-Tiny-0.033-3.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.059:4329): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-podlators-2.5.1-3.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.087:4330): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Pod-Perldoc-3.20-4.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.094:4331): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Pod-Escapes-1:1.04-293.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.382:4332): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Encode-2.51-7.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.392:4333): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Text-ParseWords-3.29-4.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.403:4334): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Pod-Usage-1.63-3.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.409:4335): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-macros-4:5.16.3-293.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.425:4336): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Storable-2.45-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.436:4337): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Exporter-5.68-3.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.445:4338): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-constant-1.27-2.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.457:4339): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-threads-1.87-4.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.467:4340): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Time-Local-1.2300-2.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.488:4341): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Socket-2.010-4.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.505:4342): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Carp-1.26-244.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043333.511:4343): pid=13098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043333.512:4344): pid=13098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043333.512:4345): pid=13098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043333.514:4346): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13098 suid=74 rport=52630 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043333.514:4347): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13098 suid=74 rport=52630 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.528:4348): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Time-HiRes-4:1.9725-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.539:4349): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-threads-shared-1.43-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.563:4350): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-PathTools-3.40-5.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.577:4351): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Scalar-List-Utils-1.27-248.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538043333.581:4352): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52630 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043333.581:4353): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52630 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043333.589:4354): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043333.590:4355): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13098 suid=74 rport=52630 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043333.591:4356): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043333.591:4357): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043333.591:4358): pid=13097 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=45 res=1 >type=SOFTWARE_UPDATE msg=audit(1538043333.632:4359): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Pod-Simple-1:3.28-4.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.647:4360): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-File-Temp-0.23.01-3.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.656:4361): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-File-Path-2.09-2.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.690:4362): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Filter-1.49-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043333.756:4363): pid=13097 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.786:4364): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-libs-4:5.16.3-293.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043333.787:4365): pid=13097 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043333.820:4366): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Getopt-Long-2.40-3.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538043333.829:4367): pid=13097 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043333.829:4368): pid=13097 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043333.831:4369): pid=13101 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043333.831:4370): pid=13101 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043333.831:4371): pid=13101 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043333.832:4372): pid=13101 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043333.863:4373): pid=13097 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043333.863:4374): pid=13097 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043333.863:4375): pid=13097 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043333.864:4376): pid=13097 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043333.864:4377): pid=13097 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043333.864:4378): pid=13097 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043333.864:4379): pid=13097 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13097 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043333.864:4380): pid=13097 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13097 suid=0 rport=52630 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043336.317:4381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043336.317:4382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043336.319:4383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043336.334:4384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043336.550:4385): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-4:5.16.3-293.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043336.564:4386): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Data-Dumper-2.145-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043336.577:4387): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Compress-Raw-Bzip2-2.061-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043336.593:4388): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Net-Daemon-0.48-5.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043336.893:4389): pid=13112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043336.894:4390): pid=13112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043336.894:4391): pid=13112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043336.895:4392): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13112 suid=74 rport=52632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043336.896:4393): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13112 suid=74 rport=52632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043336.955:4394): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043336.955:4395): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043336.962:4396): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043336.963:4397): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13112 suid=74 rport=52632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043336.965:4398): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043336.965:4399): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043336.966:4400): pid=13111 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=46 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043337.201:4401): pid=13111 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043337.222:4402): pid=13111 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043337.265:4403): pid=13111 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043337.265:4404): pid=13111 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043337.267:4405): pid=13114 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043337.267:4406): pid=13114 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043337.267:4407): pid=13114 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043337.268:4408): pid=13114 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043337.299:4409): pid=13111 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043337.299:4410): pid=13111 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043337.300:4411): pid=13111 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043337.300:4412): pid=13111 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043337.300:4413): pid=13111 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043337.300:4414): pid=13111 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043337.300:4415): pid=13111 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043337.300:4416): pid=13111 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13111 suid=0 rport=52632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043338.001:4417): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mariadb-3:10.1.20-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043338.029:4418): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Compress-Raw-Zlib-1:2.061-4.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043338.171:4419): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-IO-Compress-2.061-2.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043338.203:4420): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-PlRPC-0.2020-14.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043338.449:4421): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-DBI-1.627-4.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043338.484:4422): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-DBD-MySQL-4.023-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043338.542:4423): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="socat-1.7.3.2-2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043338.570:4424): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libaio-0.3.109-13.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043338.632:4425): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mariadb-errmsg-3:10.1.20-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043338.681:4426): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="lsof-4.87-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043338.711:4427): pid=13120 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=27 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043338.713:4428): pid=13120 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=27 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043338.724:4429): pid=13124 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=27 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043340.348:4430): pid=13134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043340.348:4431): pid=13134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043340.348:4432): pid=13134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043340.350:4433): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13134 suid=74 rport=52634 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043340.351:4434): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13134 suid=74 rport=52634 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043340.443:4435): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52634 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043340.443:4436): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52634 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043340.450:4437): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043340.451:4438): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13134 suid=74 rport=52634 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043340.453:4439): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043340.453:4440): pid=13133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043340.454:4441): pid=13133 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=47 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043340.696:4442): pid=13133 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043340.716:4443): pid=13133 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043340.758:4444): pid=13133 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043340.758:4445): pid=13133 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043340.760:4446): pid=13136 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043340.761:4447): pid=13136 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043340.761:4448): pid=13136 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043340.762:4449): pid=13136 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043340.793:4450): pid=13133 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043340.793:4451): pid=13133 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043340.794:4452): pid=13133 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043340.794:4453): pid=13133 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043340.794:4454): pid=13133 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043340.794:4455): pid=13133 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043340.794:4456): pid=13133 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043340.795:4457): pid=13133 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13133 suid=0 rport=52634 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043341.567:4458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043341.567:4459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043341.569:4460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043341.583:4461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043343.482:4462): pid=13052 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mariadb-server-3:10.1.20-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043343.830:4463): pid=13163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043343.831:4464): pid=13163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043343.831:4465): pid=13163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043343.834:4466): pid=13162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13163 suid=74 rport=52636 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043343.834:4467): pid=13162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13163 suid=74 rport=52636 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043343.895:4468): pid=13162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52636 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043343.895:4469): pid=13162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52636 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043343.903:4470): pid=13162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043343.905:4471): pid=13162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13163 suid=74 rport=52636 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043343.906:4472): pid=13162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043343.907:4473): pid=13162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043343.907:4474): pid=13162 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=48 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043344.146:4475): pid=13162 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043344.165:4476): pid=13162 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043344.208:4477): pid=13162 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043344.208:4478): pid=13162 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043344.210:4479): pid=13174 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043344.210:4480): pid=13174 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043344.210:4481): pid=13174 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043344.210:4482): pid=13174 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043344.235:4483): pid=13162 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043344.235:4484): pid=13162 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043344.237:4485): pid=13162 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043344.237:4486): pid=13162 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043344.237:4487): pid=13162 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043344.237:4488): pid=13162 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043344.238:4489): pid=13162 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043344.238:4490): pid=13162 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13162 suid=0 rport=52636 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043345.511:4491): pid=13171 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="boost-program-options-1.53.0-27.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043345.762:4492): pid=13171 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="galera-25.3.16-3.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043347.289:4493): pid=13213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043347.289:4494): pid=13213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043347.289:4495): pid=13213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043347.292:4496): pid=13212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13213 suid=74 rport=52644 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043347.292:4497): pid=13212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13213 suid=74 rport=52644 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043347.351:4498): pid=13212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52644 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043347.351:4499): pid=13212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52644 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043347.362:4500): pid=13212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043347.363:4501): pid=13212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13213 suid=74 rport=52644 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043347.364:4502): pid=13212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043347.364:4503): pid=13212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043347.364:4504): pid=13212 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=49 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043347.538:4505): pid=13212 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043347.559:4506): pid=13212 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043347.602:4507): pid=13212 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043347.603:4508): pid=13212 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043347.605:4509): pid=13215 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13215 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043347.605:4510): pid=13215 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13215 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043347.605:4511): pid=13215 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13215 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043347.606:4512): pid=13215 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043347.638:4513): pid=13212 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043347.638:4514): pid=13212 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043347.639:4515): pid=13212 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043347.639:4516): pid=13212 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043347.639:4517): pid=13212 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043347.639:4518): pid=13212 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043347.639:4519): pid=13212 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043347.639:4520): pid=13212 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13212 suid=0 rport=52644 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043350.691:4521): pid=13227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043350.691:4522): pid=13227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043350.691:4523): pid=13227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043350.694:4524): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13227 suid=74 rport=52646 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043350.694:4525): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13227 suid=74 rport=52646 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043350.793:4526): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52646 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043350.793:4527): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52646 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043350.801:4528): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043350.801:4529): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13227 suid=74 rport=52646 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043350.803:4530): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043350.804:4531): pid=13226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043350.804:4532): pid=13226 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=50 res=1 >type=SERVICE_START msg=audit(1538043350.817:4533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043350.817:4534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043350.819:4535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043350.838:4536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538043351.040:4537): pid=13226 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043351.061:4538): pid=13226 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043351.103:4539): pid=13226 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043351.103:4540): pid=13226 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043351.105:4541): pid=13232 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043351.105:4542): pid=13232 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043351.105:4543): pid=13232 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13232 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043351.106:4544): pid=13232 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043351.135:4545): pid=13226 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043351.136:4546): pid=13226 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043351.136:4547): pid=13226 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043351.137:4548): pid=13226 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043351.137:4549): pid=13226 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043351.137:4550): pid=13226 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043351.137:4551): pid=13226 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13226 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043351.137:4552): pid=13226 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13226 suid=0 rport=52646 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AVC msg=audit(1538043353.812:4553): pid=2252 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=7) exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' >type=MAC_POLICY_LOAD msg=audit(1538043347.757:4554): policy loaded auid=0 ses=16 >type=SYSCALL msg=audit(1538043347.757:4554): arch=c000003e syscall=1 success=yes exit=3930070 a0=4 a1=7fb5b37dc000 a2=3bf7d6 a3=7fffdafc3fe0 items=0 ppid=13207 pid=13222 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043347.757:4554): proctitle="/sbin/load_policy" >type=USER_MAC_CONFIG_CHANGE msg=audit(1538043353.900:4555): pid=13207 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=4568 proto=6 tcontext=system_u:object_r:mysqld_port_t:s0 comm="semanage" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043354.183:4556): pid=13241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043354.183:4557): pid=13241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043354.183:4558): pid=13241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043354.186:4559): pid=13240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13241 suid=74 rport=52648 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043354.186:4560): pid=13240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13241 suid=74 rport=52648 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043354.245:4561): pid=13240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52648 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043354.245:4562): pid=13240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52648 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043354.252:4563): pid=13240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043354.253:4564): pid=13240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13241 suid=74 rport=52648 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043354.254:4565): pid=13240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043354.254:4566): pid=13240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043354.254:4567): pid=13240 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=51 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043354.423:4568): pid=13240 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_AVC msg=audit(1538043354.436:4569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=7) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1538043354.445:4570): pid=13240 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043354.488:4571): pid=13240 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043354.488:4572): pid=13240 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043354.490:4573): pid=13243 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043354.490:4574): pid=13243 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043354.490:4575): pid=13243 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043354.491:4576): pid=13243 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043354.513:4577): pid=13240 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043354.513:4578): pid=13240 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043354.514:4579): pid=13240 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043354.515:4580): pid=13240 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043354.515:4581): pid=13240 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13240 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043354.515:4582): pid=13240 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13240 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043354.515:4583): pid=13240 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13240 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043354.515:4584): pid=13240 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13240 suid=0 rport=52648 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043356.067:4585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043356.067:4586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043356.068:4587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043356.082:4588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043357.544:4589): pid=13254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043357.544:4590): pid=13254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043357.544:4591): pid=13254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043357.546:4592): pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13254 suid=74 rport=52650 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043357.546:4593): pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13254 suid=74 rport=52650 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043357.603:4594): pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52650 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043357.603:4595): pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52650 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043357.609:4596): pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043357.610:4597): pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13254 suid=74 rport=52650 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043357.611:4598): pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043357.612:4599): pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043357.612:4600): pid=13253 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=52 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043357.833:4601): pid=13253 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043357.853:4602): pid=13253 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043357.895:4603): pid=13253 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043357.895:4604): pid=13253 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043357.898:4605): pid=13256 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043357.898:4606): pid=13256 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043357.898:4607): pid=13256 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043357.899:4608): pid=13256 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043357.921:4609): pid=13253 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043357.922:4610): pid=13253 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043357.922:4611): pid=13253 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043357.923:4612): pid=13253 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043357.923:4613): pid=13253 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043357.923:4614): pid=13253 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043357.923:4615): pid=13253 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043357.923:4616): pid=13253 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13253 suid=0 rport=52650 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043360.952:4617): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13265 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043360.952:4618): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13265 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043360.952:4619): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13265 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043360.954:4620): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13265 suid=74 rport=52652 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043360.954:4621): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13265 suid=74 rport=52652 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043361.011:4622): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52652 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043361.011:4623): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52652 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043361.017:4624): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043361.018:4625): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13265 suid=74 rport=52652 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043361.019:4626): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043361.019:4627): pid=13264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043361.020:4628): pid=13264 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=53 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043361.180:4629): pid=13264 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043361.189:4630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043361.189:4631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043361.193:4632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043361.217:4633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043361.222:4634): pid=13264 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043361.266:4635): pid=13264 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043361.266:4636): pid=13264 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043361.269:4637): pid=13270 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043361.269:4638): pid=13270 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043361.269:4639): pid=13270 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13270 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043361.270:4640): pid=13270 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043361.294:4641): pid=13264 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043361.294:4642): pid=13264 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043361.295:4643): pid=13264 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043361.295:4644): pid=13264 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043361.295:4645): pid=13264 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13264 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043361.295:4646): pid=13264 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13264 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043361.295:4647): pid=13264 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13264 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043361.295:4648): pid=13264 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13264 suid=0 rport=52652 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043364.336:4649): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043364.336:4650): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043364.336:4651): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043364.338:4652): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13278 suid=74 rport=52654 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043364.339:4653): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13278 suid=74 rport=52654 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043364.426:4654): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52654 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043364.426:4655): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52654 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043364.436:4656): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043364.437:4657): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13278 suid=74 rport=52654 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043364.438:4658): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043364.439:4659): pid=13277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043364.439:4660): pid=13277 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=54 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043364.591:4661): pid=13277 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043364.607:4662): pid=13277 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043364.649:4663): pid=13277 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043364.649:4664): pid=13277 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043364.651:4665): pid=13280 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13280 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043364.652:4666): pid=13280 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13280 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043364.652:4667): pid=13280 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13280 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043364.653:4668): pid=13280 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043364.682:4669): pid=13277 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043364.682:4670): pid=13277 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043364.682:4671): pid=13277 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043364.682:4672): pid=13277 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043364.682:4673): pid=13277 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043364.682:4674): pid=13277 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043364.682:4675): pid=13277 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043364.682:4676): pid=13277 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13277 suid=0 rport=52654 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043366.317:4677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043366.317:4678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043366.318:4679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043366.342:4680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043367.727:4681): pid=13296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043367.727:4682): pid=13296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043367.727:4683): pid=13296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043367.729:4684): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13296 suid=74 rport=52656 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043367.729:4685): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13296 suid=74 rport=52656 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043367.834:4686): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043367.834:4687): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043367.842:4688): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043367.842:4689): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13296 suid=74 rport=52656 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043367.843:4690): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043367.843:4691): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043367.844:4692): pid=13295 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=55 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043367.997:4693): pid=13295 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043368.017:4694): pid=13295 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043368.062:4695): pid=13295 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043368.062:4696): pid=13295 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043368.065:4697): pid=13298 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043368.065:4698): pid=13298 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043368.065:4699): pid=13298 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043368.067:4700): pid=13298 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043368.098:4701): pid=13295 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043368.098:4702): pid=13295 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043368.099:4703): pid=13295 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043368.099:4704): pid=13295 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043368.099:4705): pid=13295 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043368.099:4706): pid=13295 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043368.099:4707): pid=13295 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043368.099:4708): pid=13295 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13295 suid=0 rport=52656 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AVC msg=audit(1538043369.040:4709): pid=2252 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=8) exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' >type=MAC_POLICY_LOAD msg=audit(1538043366.233:4710): policy loaded auid=0 ses=16 >type=SYSCALL msg=audit(1538043366.233:4710): arch=c000003e syscall=1 success=yes exit=3931042 a0=4 a1=7f805a518000 a2=3bfba2 a3=7ffefca22c20 items=0 ppid=13236 pid=13288 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043366.233:4710): proctitle="/sbin/load_policy" >type=SOFTWARE_UPDATE msg=audit(1538043369.107:4711): pid=13171 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mariadb-server-galera-3:10.1.20-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043371.156:4712): pid=13387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13387 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043371.156:4713): pid=13387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13387 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043371.157:4714): pid=13387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13387 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043371.158:4715): pid=13386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13387 suid=74 rport=52658 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043371.159:4716): pid=13386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13387 suid=74 rport=52658 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043371.218:4717): pid=13386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52658 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043371.218:4718): pid=13386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52658 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043371.226:4719): pid=13386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043371.227:4720): pid=13386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13387 suid=74 rport=52658 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043371.228:4721): pid=13386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043371.228:4722): pid=13386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043371.229:4723): pid=13386 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=56 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043371.397:4724): pid=13386 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043371.406:4725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043371.406:4726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043371.411:4727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AVC msg=audit(1538043371.412:4728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=8) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1538043371.421:4729): pid=13386 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_STOP msg=audit(1538043371.426:4730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_LOGIN msg=audit(1538043371.465:4731): pid=13386 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043371.466:4732): pid=13386 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043371.468:4733): pid=13392 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13392 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043371.469:4734): pid=13392 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13392 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043371.469:4735): pid=13392 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13392 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043371.470:4736): pid=13392 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043371.494:4737): pid=13386 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043371.494:4738): pid=13386 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043371.494:4739): pid=13386 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043371.494:4740): pid=13386 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043371.494:4741): pid=13386 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043371.495:4742): pid=13386 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043371.495:4743): pid=13386 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043371.495:4744): pid=13386 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13386 suid=0 rport=52658 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043374.524:4745): pid=13430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13430 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043374.524:4746): pid=13430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13430 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043374.524:4747): pid=13430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13430 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043374.526:4748): pid=13429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13430 suid=74 rport=52660 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043374.526:4749): pid=13429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13430 suid=74 rport=52660 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043374.582:4750): pid=13429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52660 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043374.582:4751): pid=13429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52660 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043374.591:4752): pid=13429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043374.592:4753): pid=13429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13430 suid=74 rport=52660 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043374.593:4754): pid=13429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043374.593:4755): pid=13429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043374.593:4756): pid=13429 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=57 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043374.748:4757): pid=13429 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043374.765:4758): pid=13429 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043374.810:4759): pid=13429 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043374.810:4760): pid=13429 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043374.812:4761): pid=13432 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043374.812:4762): pid=13432 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043374.812:4763): pid=13432 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043374.814:4764): pid=13432 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043374.835:4765): pid=13429 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043374.836:4766): pid=13429 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043374.836:4767): pid=13429 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043374.836:4768): pid=13429 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043374.836:4769): pid=13429 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13429 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043374.836:4770): pid=13429 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13429 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043374.836:4771): pid=13429 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13429 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043374.836:4772): pid=13429 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13429 suid=0 rport=52660 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043376.567:4773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043376.567:4774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043376.568:4775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043376.582:4776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043377.866:4777): pid=13473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043377.866:4778): pid=13473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043377.866:4779): pid=13473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043377.868:4780): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13473 suid=74 rport=52662 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043377.868:4781): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13473 suid=74 rport=52662 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043377.929:4782): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52662 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043377.930:4783): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52662 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043377.937:4784): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043377.938:4785): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13473 suid=74 rport=52662 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043377.940:4786): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043377.940:4787): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043377.940:4788): pid=13472 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=58 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043378.121:4789): pid=13472 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043378.149:4790): pid=13472 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043378.193:4791): pid=13472 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043378.193:4792): pid=13472 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043378.196:4793): pid=13475 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043378.196:4794): pid=13475 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043378.196:4795): pid=13475 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043378.198:4796): pid=13475 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043378.227:4797): pid=13472 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043378.227:4798): pid=13472 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043378.227:4799): pid=13472 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043378.227:4800): pid=13472 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043378.228:4801): pid=13472 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043378.228:4802): pid=13472 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043378.228:4803): pid=13472 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043378.228:4804): pid=13472 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13472 suid=0 rport=52662 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043379.851:4805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=mariadb comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043381.258:4806): pid=13724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043381.258:4807): pid=13724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043381.258:4808): pid=13724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043381.261:4809): pid=13722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13724 suid=74 rport=52664 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043381.261:4810): pid=13722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13724 suid=74 rport=52664 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043381.319:4811): pid=13722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52664 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043381.319:4812): pid=13722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52664 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043381.327:4813): pid=13722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043381.327:4814): pid=13722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13724 suid=74 rport=52664 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043381.328:4815): pid=13722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043381.329:4816): pid=13722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043381.329:4817): pid=13722 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=59 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043381.495:4818): pid=13722 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043381.513:4819): pid=13722 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043381.555:4820): pid=13722 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043381.555:4821): pid=13722 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043381.556:4822): pid=13727 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13727 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043381.556:4823): pid=13727 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13727 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043381.556:4824): pid=13727 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13727 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043381.557:4825): pid=13727 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043381.576:4826): pid=13722 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043381.576:4827): pid=13722 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043381.577:4828): pid=13722 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043381.577:4829): pid=13722 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043381.577:4830): pid=13722 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043381.577:4831): pid=13722 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043381.577:4832): pid=13722 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043381.577:4833): pid=13722 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13722 suid=0 rport=52664 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043381.693:4834): pid=13712 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mailcap-2.1.41-2.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043384.244:4835): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-iso8601-0.1.11-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043384.304:4836): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-stevedore-1.28.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043384.318:4837): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-funcsigs-1.0.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043384.610:4838): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043384.611:4839): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043384.611:4840): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043384.614:4841): pid=13751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13752 suid=74 rport=52672 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043384.614:4842): pid=13751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13752 suid=74 rport=52672 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043384.618:4843): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-keystoneauth1-3.4.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043384.647:4844): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-pyparsing-2.1.10-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043384.652:4845): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="pyparsing-2.1.10-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043384.664:4846): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-oslo-i18n-lang-3.19.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538043384.671:4847): pid=13751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52672 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043384.671:4848): pid=13751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52672 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043384.680:4849): pid=13751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043384.681:4850): pid=13751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13752 suid=74 rport=52672 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043384.683:4851): pid=13751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043384.684:4852): pid=13751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043384.684:4853): pid=13751 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=60 res=1 >type=SOFTWARE_UPDATE msg=audit(1538043384.755:4854): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-i18n-3.19.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043384.807:4855): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-msgpack-0.4.6-5.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043384.850:4856): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-wrapt-1.10.8-3.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043384.876:4857): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-debtcollector-1.19.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043384.906:4858): pid=13751 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043384.936:4859): pid=13751 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043384.964:4860): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-keyring-5.7.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043384.974:4861): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-monotonic-0.6-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538043384.980:4862): pid=13751 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043384.981:4863): pid=13751 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043384.984:4864): pid=13754 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043384.984:4865): pid=13754 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043384.984:4866): pid=13754 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043384.985:4867): pid=13754 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043384.997:4868): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-rfc3986-0.3.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043385.005:4869): pid=13751 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043385.006:4870): pid=13751 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043385.006:4871): pid=13751 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043385.006:4872): pid=13751 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043385.006:4873): pid=13751 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043385.006:4874): pid=13751 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043385.006:4875): pid=13751 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043385.006:4876): pid=13751 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13751 suid=0 rport=52672 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043385.013:4877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043385.013:4878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043385.015:4879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043385.029:4880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043385.091:4881): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-config-2:5.2.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043385.099:4882): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-oslo-utils-lang-3.35.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043385.144:4883): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-utils-3.35.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043385.169:4884): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-serialization-2.24.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043385.341:4885): pid=13737 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-keystoneclient-1:3.15.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043388.059:4886): pid=13780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043388.060:4887): pid=13780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043388.060:4888): pid=13780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043388.062:4889): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13780 suid=74 rport=52674 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043388.062:4890): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13780 suid=74 rport=52674 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043388.119:4891): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52674 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043388.119:4892): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52674 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043388.127:4893): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043388.128:4894): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13780 suid=74 rport=52674 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043388.129:4895): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043388.130:4896): pid=13779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043388.130:4897): pid=13779 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=61 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043388.288:4898): pid=13779 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043388.305:4899): pid=13779 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043388.349:4900): pid=13779 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043388.349:4901): pid=13779 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043388.353:4902): pid=13784 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13784 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043388.353:4903): pid=13784 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13784 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043388.353:4904): pid=13784 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13784 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043388.355:4905): pid=13784 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043388.385:4906): pid=13779 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043388.386:4907): pid=13779 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043388.386:4908): pid=13779 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043388.386:4909): pid=13779 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043388.386:4910): pid=13779 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043388.386:4911): pid=13779 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043388.386:4912): pid=13779 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043388.387:4913): pid=13779 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13779 suid=0 rport=52674 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043389.857:4914): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-simplejson-3.5.3-6.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043389.871:4915): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-requestsexceptions-1.4.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043389.884:4916): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-appdirs-1.4.0-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043389.936:4917): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-os-client-config-1.29.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043390.068:4918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043390.068:4919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043390.070:4920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043390.079:4921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043390.094:4922): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-cinderclient-3.5.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043390.195:4923): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-novaclient-1:10.1.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043390.206:4924): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-deprecation-1.0-3.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043390.219:4925): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-munch-2.2.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043390.239:4926): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-dogpile-core-0.4.1-6.1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043390.285:4927): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-dogpile-cache-0.6.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043390.302:4928): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-unicodecsv-0.14.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043390.315:4929): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-cmd2-0.6.8-8.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043390.373:4930): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-cliff-2.11.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043390.401:4931): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-os-service-types-1.1.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043390.416:4932): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-openstackclient-lang-3.14.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043390.440:4933): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-jmespath-0.9.0-3.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043390.847:4934): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-openstacksdk-0.11.3-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043390.893:4935): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-osc-lib-1.9.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043391.106:4936): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-neutronclient-6.7.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043391.121:4937): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-repoze-lru-0.4-8.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043391.168:4938): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-jsonschema-2.6.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043391.185:4939): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-warlock-1.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043391.262:4940): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-glanceclient-1:2.10.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043391.425:4941): pid=13797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043391.426:4942): pid=13797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043391.426:4943): pid=13797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043391.428:4944): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13797 suid=74 rport=52682 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043391.429:4945): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13797 suid=74 rport=52682 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043391.493:4946): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52682 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043391.493:4947): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52682 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043391.501:4948): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043391.502:4949): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13797 suid=74 rport=52682 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043391.503:4950): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043391.503:4951): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043391.503:4952): pid=13796 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=62 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043391.661:4953): pid=13796 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043391.692:4954): pid=13796 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043391.733:4955): pid=13796 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043391.733:4956): pid=13796 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043391.735:4957): pid=13799 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043391.736:4958): pid=13799 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043391.736:4959): pid=13799 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043391.737:4960): pid=13799 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043391.760:4961): pid=13796 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043391.760:4962): pid=13796 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043391.761:4963): pid=13796 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043391.761:4964): pid=13796 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043391.761:4965): pid=13796 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043391.761:4966): pid=13796 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043391.761:4967): pid=13796 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043391.761:4968): pid=13796 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13796 suid=0 rport=52682 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043392.082:4969): pid=13767 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-openstackclient-3.14.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043394.798:4970): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043394.798:4971): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043394.798:4972): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043394.800:4973): pid=13839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13840 suid=74 rport=52698 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043394.800:4974): pid=13839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13840 suid=74 rport=52698 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043394.857:4975): pid=13839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52698 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043394.857:4976): pid=13839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52698 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043394.865:4977): pid=13839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043394.866:4978): pid=13839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13840 suid=74 rport=52698 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043394.867:4979): pid=13839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043394.868:4980): pid=13839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043394.868:4981): pid=13839 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=63 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043395.025:4982): pid=13839 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043395.042:4983): pid=13839 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043395.084:4984): pid=13839 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043395.084:4985): pid=13839 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043395.086:4986): pid=13842 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043395.086:4987): pid=13842 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043395.086:4988): pid=13842 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043395.087:4989): pid=13842 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043395.108:4990): pid=13839 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043395.109:4991): pid=13839 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043395.109:4992): pid=13839 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043395.109:4993): pid=13839 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043395.109:4994): pid=13839 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13839 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043395.109:4995): pid=13839 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13839 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043395.109:4996): pid=13839 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13839 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043395.109:4997): pid=13839 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13839 suid=0 rport=52698 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043395.113:4998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043395.113:4999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043395.114:5000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043395.127:5001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043398.144:5002): pid=13859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043398.144:5003): pid=13859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043398.144:5004): pid=13859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043398.146:5005): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13859 suid=74 rport=52706 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043398.147:5006): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13859 suid=74 rport=52706 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043398.203:5007): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52706 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043398.203:5008): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52706 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043398.209:5009): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043398.210:5010): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13859 suid=74 rport=52706 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043398.212:5011): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043398.212:5012): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043398.212:5013): pid=13858 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=64 res=1 >type=SOFTWARE_UPDATE msg=audit(1538043398.231:5014): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-webob-1.7.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043398.431:5015): pid=13858 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043398.452:5016): pid=13858 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043398.496:5017): pid=13858 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043398.496:5018): pid=13858 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043398.499:5019): pid=13861 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13861 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043398.499:5020): pid=13861 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13861 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043398.499:5021): pid=13861 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13861 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043398.500:5022): pid=13861 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043398.528:5023): pid=13858 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043398.528:5024): pid=13858 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043398.529:5025): pid=13858 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043398.530:5026): pid=13858 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043398.530:5027): pid=13858 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043398.530:5028): pid=13858 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043398.530:5029): pid=13858 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043398.530:5030): pid=13858 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13858 suid=0 rport=52706 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043398.822:5031): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-sqlalchemy-1.2.2-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043398.862:5032): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-context-2.20.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043398.914:5033): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-vine-1.1.3-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043399.012:5034): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-amqp-2.3.2-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043399.047:5035): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-tempita-0.5.1-6.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043399.679:5036): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-paste-1.7.5.1-9.20111221hg1498.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043399.748:5037): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-paste-deploy-1.5.2-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043399.860:5038): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-routes-2.4.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043399.889:5039): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-memcached-1.58-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043400.039:5040): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-zope-interface-4.0.5-4.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043400.063:5041): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-greenlet-0.4.12-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043400.317:5042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043400.317:5043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043400.319:5044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043400.334:5045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043400.890:5046): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-eventlet-0.20.1-5.1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043400.972:5047): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-ldap-0:2.4.15-2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.057:5048): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-pika-0.10.0-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.069:5049): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-pika_pool-0.1.3-3.1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.083:5050): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-ldappool-1.0-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.175:5051): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-repoze-who-2.1-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.288:5052): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-beaker-1.5.4-10.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.556:5053): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-mako-0.8.1-2.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.564:5054): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-oslo-middleware-lang-3.34.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043401.565:5055): pid=13872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043401.565:5056): pid=13872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043401.565:5057): pid=13872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043401.567:5058): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13872 suid=74 rport=52708 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043401.567:5059): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13872 suid=74 rport=52708 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.576:5060): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-contextlib2-0.4.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.612:5061): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-futurist-1.6.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.624:5062): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-oslo-cache-lang-1.28.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538043401.629:5063): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52708 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043401.629:5064): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52708 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043401.639:5065): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043401.640:5066): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13872 suid=74 rport=52708 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043401.642:5067): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043401.642:5068): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043401.642:5069): pid=13871 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=65 res=1 >type=SOFTWARE_UPDATE msg=audit(1538043401.710:5070): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-PyMySQL-0.7.11-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.746:5071): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-tenacity-4.8.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.773:5072): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-cachetools-2.0.1-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.789:5073): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-scrypt-0.8.0-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.843:5074): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="MySQL-python-1.2.5-1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.857:5075): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-linecache2-1.0.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.873:5076): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-traceback2-1.4.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043401.878:5077): pid=13871 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043401.907:5078): pid=13871 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043401.950:5079): pid=13871 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043401.950:5080): pid=13871 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.950:5081): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-unittest2-1.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043401.952:5082): pid=13874 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043401.953:5083): pid=13874 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043401.953:5084): pid=13874 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043401.954:5085): pid=13874 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043401.979:5086): pid=13871 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043401.980:5087): pid=13871 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043401.980:5088): pid=13871 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043401.980:5089): pid=13871 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043401.980:5090): pid=13871 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13871 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043401.980:5091): pid=13871 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13871 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043401.980:5092): pid=13871 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13871 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043401.980:5093): pid=13871 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13871 suid=0 rport=52708 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043401.981:5094): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-jwcrypto-0.4.2-1.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.076:5095): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oauthlib-2.0.1-8.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.086:5096): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-oslo-db-lang-4.33.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.124:5097): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-sqlparse-0.1.18-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.279:5098): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-migrate-0.11.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.289:5099): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-oslo-concurrency-lang-3.25.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.322:5100): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-fasteners-0.14.1-6.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.357:5101): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-defusedxml-0.5.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.374:5102): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-extras-1.0.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.382:5103): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-oslo-policy-lang-1.33.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.422:5104): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-policy-1.33.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.446:5105): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-statsd-3.2.1-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.489:5106): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-middleware-3.34.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.502:5107): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-editor-0.4-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.796:5108): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-alembic-0.9.7-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043402.866:5109): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-db-4.33.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043403.150:5110): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-crypto-2.6.1-16.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043403.426:5111): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-pysaml2-3.0.2-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043403.439:5112): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-anyjson-0.3.3-7.1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043403.847:5113): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-kombu-1:4.0.2-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.127:5114): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-passlib-1.7.0-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.136:5115): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-oslo-log-lang-3.36.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.178:5116): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-log-3.36.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.216:5117): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-cache-1.28.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.234:5118): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-bcrypt-3.1.2-3.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.243:5119): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-mimeparse-0.1.4-6.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.375:5120): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-testtools-1.8.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.446:5121): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-fixtures-3.0.0-7.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.475:5122): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-concurrency-3.25.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.509:5123): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-service-1.29.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.716:5124): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-messaging-5.35.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.808:5125): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-osprofiler-1.15.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.820:5126): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-pycadf-common-2.7.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043404.873:5127): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-pycadf-2.7.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043405.019:5128): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-keystonemiddleware-4.21.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043405.031:5129): pid=13882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043405.031:5130): pid=13882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043405.031:5131): pid=13882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043405.034:5132): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13882 suid=74 rport=52710 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043405.034:5133): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13882 suid=74 rport=52710 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043405.122:5134): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52710 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043405.122:5135): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52710 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043405.130:5136): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043405.130:5137): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13882 suid=74 rport=52710 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043405.132:5138): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043405.132:5139): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043405.132:5140): pid=13881 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=66 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043405.293:5141): pid=13881 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043405.310:5142): pid=13881 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043405.352:5143): pid=13881 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043405.352:5144): pid=13881 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043405.354:5145): pid=13884 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043405.354:5146): pid=13884 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043405.355:5147): pid=13884 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043405.356:5148): pid=13884 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043405.378:5149): pid=13881 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043405.378:5150): pid=13881 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043405.379:5151): pid=13881 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043405.379:5152): pid=13881 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043405.379:5153): pid=13881 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043405.379:5154): pid=13881 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043405.379:5155): pid=13881 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043405.379:5156): pid=13881 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13881 suid=0 rport=52710 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043405.383:5157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043405.383:5158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043405.384:5159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043405.396:5160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043405.851:5161): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-keystone-1:13.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043405.892:5162): pid=13893 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=163 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043405.895:5163): pid=13893 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=163 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043405.907:5164): pid=13898 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=163 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043405.978:5165): pid=13815 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-keystone-1:13.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043408.422:5166): pid=13933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043408.422:5167): pid=13933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043408.422:5168): pid=13933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043408.424:5169): pid=13932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13933 suid=74 rport=52720 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043408.424:5170): pid=13932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13933 suid=74 rport=52720 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043408.480:5171): pid=13932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52720 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043408.480:5172): pid=13932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52720 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043408.489:5173): pid=13932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043408.490:5174): pid=13932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13933 suid=74 rport=52720 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043408.491:5175): pid=13932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043408.491:5176): pid=13932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043408.491:5177): pid=13932 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=67 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043408.652:5178): pid=13932 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043408.671:5179): pid=13932 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043408.713:5180): pid=13932 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043408.713:5181): pid=13932 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043408.714:5182): pid=13937 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043408.714:5183): pid=13937 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043408.715:5184): pid=13937 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043408.715:5185): pid=13937 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043408.746:5186): pid=13932 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043408.747:5187): pid=13932 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043408.747:5188): pid=13932 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043408.747:5189): pid=13932 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043408.747:5190): pid=13932 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043408.747:5191): pid=13932 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043408.747:5192): pid=13932 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043408.747:5193): pid=13932 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13932 suid=0 rport=52720 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043410.567:5194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043410.567:5195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043410.569:5196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043410.584:5197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043411.780:5198): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043411.780:5199): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043411.780:5200): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043411.782:5201): pid=13947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13948 suid=74 rport=52724 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043411.782:5202): pid=13947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13948 suid=74 rport=52724 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043411.840:5203): pid=13947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52724 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043411.840:5204): pid=13947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52724 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043411.846:5205): pid=13947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043411.847:5206): pid=13947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13948 suid=74 rport=52724 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043411.849:5207): pid=13947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043411.849:5208): pid=13947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043411.849:5209): pid=13947 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=68 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043412.004:5210): pid=13947 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043412.020:5211): pid=13947 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043412.063:5212): pid=13947 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043412.063:5213): pid=13947 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043412.065:5214): pid=13950 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043412.065:5215): pid=13950 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043412.065:5216): pid=13950 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043412.066:5217): pid=13950 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043412.089:5218): pid=13947 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043412.089:5219): pid=13947 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043412.089:5220): pid=13947 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043412.089:5221): pid=13947 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043412.090:5222): pid=13947 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043412.090:5223): pid=13947 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043412.090:5224): pid=13947 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043412.090:5225): pid=13947 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13947 suid=0 rport=52724 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043412.687:5226): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libquadmath-4.8.5-36.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043412.740:5227): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libgfortran-4.8.5-36.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043413.493:5228): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="atlas-3.10.1-12.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043413.513:5229): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-retrying-1.2.3-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043413.618:5230): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-swiftclient-3.5.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043413.717:5231): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="device-mapper-multipath-libs-0.4.9-123.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043413.841:5232): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="device-mapper-multipath-0.4.9-123.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043413.857:5233): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="pysendfile-2.0.0-10.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043413.873:5234): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-simplegeneric-0.8-7.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043413.996:5235): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-wsme-0.9.3-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043414.005:5236): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-oslo-privsep-lang-1.27.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043414.031:5237): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-privsep-1.27.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043414.060:5238): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-automaton-1.14.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043414.085:5239): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-httplib2-0.9.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043414.200:5240): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-suds-0.7-0.4.94664ddd46a6.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043414.321:5241): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-castellan-0.17.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043414.415:5242): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-cursive-0.2.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043414.686:5243): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-nose-1.3.7-1.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043415.127:5244): pid=13980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043415.128:5245): pid=13980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043415.128:5246): pid=13980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043415.129:5247): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13980 suid=74 rport=52726 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043415.130:5248): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13980 suid=74 rport=52726 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043415.186:5249): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52726 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043415.186:5250): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52726 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043415.193:5251): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043415.194:5252): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13980 suid=74 rport=52726 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043415.195:5253): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043415.196:5254): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043415.196:5255): pid=13979 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=69 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043415.354:5256): pid=13979 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043415.375:5257): pid=13979 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043415.417:5258): pid=13979 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043415.418:5259): pid=13979 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043415.420:5260): pid=13982 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043415.420:5261): pid=13982 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043415.420:5262): pid=13982 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043415.421:5263): pid=13982 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043415.443:5264): pid=13979 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043415.443:5265): pid=13979 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043415.444:5266): pid=13979 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043415.444:5267): pid=13979 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043415.444:5268): pid=13979 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043415.444:5269): pid=13979 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043415.444:5270): pid=13979 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043415.444:5271): pid=13979 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13979 suid=0 rport=52726 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043415.731:5272): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-numpy-1:1.11.2-3.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043418.073:5273): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-scipy-0.18.0-5.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043418.475:5274): pid=13990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043418.475:5275): pid=13990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043418.476:5276): pid=13990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043418.477:5277): pid=13989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13990 suid=74 rport=52728 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043418.478:5278): pid=13989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=13990 suid=74 rport=52728 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043418.535:5279): pid=13989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52728 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043418.535:5280): pid=13989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52728 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043418.542:5281): pid=13989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043418.543:5282): pid=13989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13990 suid=74 rport=52728 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043418.544:5283): pid=13989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043418.544:5284): pid=13989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043418.544:5285): pid=13989 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=70 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043418.690:5286): pid=13989 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043418.718:5287): pid=13989 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043418.762:5288): pid=13989 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043418.762:5289): pid=13989 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043418.765:5290): pid=13992 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043418.766:5291): pid=13992 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043418.766:5292): pid=13992 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043418.768:5293): pid=13992 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043418.797:5294): pid=13989 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043418.797:5295): pid=13989 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043418.798:5296): pid=13989 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043418.798:5297): pid=13989 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043418.798:5298): pid=13989 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043418.798:5299): pid=13989 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043418.798:5300): pid=13989 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13989 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043418.798:5301): pid=13989 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13989 suid=0 rport=52728 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043418.800:5302): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-networkx-core-1.10-1.1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043418.808:5303): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-networkx-1.10-1.1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043419.068:5304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043419.068:5305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043419.069:5306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043419.086:5307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043419.186:5308): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-taskflow-3.1.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043419.393:5309): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-os-win-3.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043419.680:5310): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-os-brick-2.3.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043419.690:5311): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-oslo-vmware-lang-2.26.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043419.777:5312): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-vmware-2.26.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043419.805:5313): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-rootwrap-5.13.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043419.913:5314): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-glance-store-0.23.1-0.20180213060248.ad7df98.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043420.335:5315): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-glance-1:16.0.1-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043420.378:5316): pid=14001 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=161 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043420.380:5317): pid=14001 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=161 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043420.392:5318): pid=14006 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=161 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043420.688:5319): pid=13914 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-glance-1:16.0.1-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043421.837:5320): pid=14061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043421.837:5321): pid=14061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043421.837:5322): pid=14061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043421.839:5323): pid=14060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14061 suid=74 rport=52730 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043421.839:5324): pid=14060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14061 suid=74 rport=52730 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043421.897:5325): pid=14060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52730 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043421.897:5326): pid=14060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52730 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043421.906:5327): pid=14060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043421.907:5328): pid=14060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14061 suid=74 rport=52730 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043421.910:5329): pid=14060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043421.910:5330): pid=14060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043421.910:5331): pid=14060 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=71 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043422.077:5332): pid=14060 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043422.095:5333): pid=14060 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043422.139:5334): pid=14060 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043422.139:5335): pid=14060 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043422.141:5336): pid=14063 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043422.141:5337): pid=14063 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043422.141:5338): pid=14063 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043422.142:5339): pid=14063 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043422.170:5340): pid=14060 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043422.170:5341): pid=14060 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043422.171:5342): pid=14060 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043422.171:5343): pid=14060 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043422.171:5344): pid=14060 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043422.171:5345): pid=14060 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043422.171:5346): pid=14060 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043422.171:5347): pid=14060 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14060 suid=0 rport=52730 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043425.199:5348): pid=14088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043425.199:5349): pid=14088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043425.199:5350): pid=14088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043425.201:5351): pid=14087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14088 suid=74 rport=52736 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043425.201:5352): pid=14087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14088 suid=74 rport=52736 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043425.258:5353): pid=14087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52736 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043425.258:5354): pid=14087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52736 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043425.265:5355): pid=14087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043425.266:5356): pid=14087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14088 suid=74 rport=52736 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043425.267:5357): pid=14087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043425.267:5358): pid=14087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043425.267:5359): pid=14087 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=72 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043425.454:5360): pid=14087 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043425.482:5361): pid=14087 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043425.524:5362): pid=14087 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043425.524:5363): pid=14087 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043425.525:5364): pid=14093 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043425.526:5365): pid=14093 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043425.526:5366): pid=14093 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043425.527:5367): pid=14093 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043425.550:5368): pid=14087 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043425.550:5369): pid=14087 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043425.550:5370): pid=14087 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043425.550:5371): pid=14087 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043425.550:5372): pid=14087 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043425.550:5373): pid=14087 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043425.550:5374): pid=14087 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14087 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043425.550:5375): pid=14087 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14087 suid=0 rport=52736 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043425.817:5376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043425.817:5377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043425.818:5378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043425.833:5379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043428.577:5380): pid=14119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043428.577:5381): pid=14119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043428.577:5382): pid=14119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14119 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043428.580:5383): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14119 suid=74 rport=52756 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043428.580:5384): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14119 suid=74 rport=52756 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043428.636:5385): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52756 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043428.636:5386): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52756 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043428.642:5387): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043428.643:5388): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14119 suid=74 rport=52756 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043428.644:5389): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043428.645:5390): pid=14118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043428.645:5391): pid=14118 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=73 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043428.799:5392): pid=14118 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043428.819:5393): pid=14118 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043428.861:5394): pid=14118 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043428.861:5395): pid=14118 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043428.861:5396): pid=14127 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043428.862:5397): pid=14127 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043428.862:5398): pid=14127 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043428.862:5399): pid=14127 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043428.880:5400): pid=14118 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043428.881:5401): pid=14118 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043428.881:5402): pid=14118 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043428.881:5403): pid=14118 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043428.881:5404): pid=14118 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043428.881:5405): pid=14118 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043428.881:5406): pid=14118 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14118 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043428.882:5407): pid=14118 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14118 suid=0 rport=52756 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043430.231:5408): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="glusterfs-libs-3.12.2-18.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043430.255:5409): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="device-mapper-event-libs-7:1.02.149-8.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043430.318:5410): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-pyasn1-0.1.9-7.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043430.359:5411): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-pyasn1-modules-0.1.9-7.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043430.460:5412): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-paramiko-2.1.1-5.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043430.618:5413): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="device-mapper-event-7:1.02.149-8.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043430.879:5414): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="lvm2-libs-7:2.02.180-8.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043430.903:5415): pid=14171 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=994 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043430.905:5416): pid=14171 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=994 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043430.919:5417): pid=14176 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=997 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043431.064:5418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043431.064:5419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043431.078:5420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043431.083:5421): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="glusterfs-3.12.2-18.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043431.215:5422): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="glusterfs-client-xlators-3.12.2-18.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043431.253:5423): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="glusterfs-api-3.12.2-18.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043431.653:5424): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="iscsi-initiator-utils-6.2.0.874-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043431.850:5425): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="iscsi-initiator-utils-iscsiuio-6.2.0.874-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043431.911:5426): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="gperftools-libs-2.6.1-1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043431.935:5427): pid=14277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043431.935:5428): pid=14277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043431.935:5429): pid=14277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043431.936:5430): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14277 suid=74 rport=52766 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043431.937:5431): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14277 suid=74 rport=52766 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043431.954:5432): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-kmod-0.9-4.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538043431.997:5433): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52766 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043431.997:5434): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52766 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043432.004:5435): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043432.005:5436): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14277 suid=74 rport=52766 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043432.006:5437): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043432.007:5438): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043432.007:5439): pid=14276 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=74 res=1 >type=SOFTWARE_UPDATE msg=audit(1538043432.160:5440): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-rtslib-2.1.fb67-1.el7cp.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043432.168:5441): pid=14276 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043432.198:5442): pid=14276 uid=0 auid=0 ses=74 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043432.241:5443): pid=14276 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043432.241:5444): pid=14276 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043432.243:5445): pid=14295 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043432.243:5446): pid=14295 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043432.243:5447): pid=14295 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14295 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043432.244:5448): pid=14295 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043432.258:5449): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-mock-2.0.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043432.270:5450): pid=14276 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043432.270:5451): pid=14276 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043432.271:5452): pid=14276 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043432.271:5453): pid=14276 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043432.272:5454): pid=14276 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043432.272:5455): pid=14276 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043432.272:5456): pid=14276 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043432.272:5457): pid=14276 uid=0 auid=0 ses=74 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14276 suid=0 rport=52766 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043432.462:5458): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-barbicanclient-4.6.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043432.506:5459): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libiscsi-1.9.0-7.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043432.551:5460): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-gflags-2.0-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043432.668:5461): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-oauth2client-1.5.2-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043432.680:5462): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-oslo-versionedobjects-lang-1.31.3-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043432.761:5463): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-versionedobjects-1.31.3-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043432.832:5464): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-redis-2.10.3-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043432.883:5465): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="userspace-rcu-0.7.16-2.el7cp.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043432.944:5466): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="lttng-ust-2.4.1-5.el7cp.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043432.960:5467): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="sysfsutils-2.1.0-16.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043432.991:5468): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rdma-core-17.2-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043433.065:5469): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libibverbs-17.2-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043433.662:5470): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="librados2-2:12.2.5-42.el7cp.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043433.811:5471): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="librbd1-2:12.2.5-42.el7cp.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043433.879:5472): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="nettle-2.7.1-8.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043433.935:5473): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-reports-1.26.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043433.959:5474): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-voluptuous-0.10.5-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043434.028:5475): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-kazoo-2.2.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043434.052:5476): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-zake-0.2.2-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043434.100:5477): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-tooz-1.60.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043434.110:5478): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-uri-templates-0.6-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043434.147:5479): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-google-api-client-1.4.2-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043434.171:5480): pid=14310 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=59 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043434.173:5481): pid=14310 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=59 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043434.194:5482): pid=14315 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=59 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043434.384:5483): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="trousers-0.3.14-2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043434.505:5484): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="gnutls-3.3.29-8.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043434.762:5485): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="qemu-img-rhev-10:2.12.0-13.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043435.309:5486): pid=14342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043435.310:5487): pid=14342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043435.310:5488): pid=14342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043435.312:5489): pid=14341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14342 suid=74 rport=52768 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043435.312:5490): pid=14341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14342 suid=74 rport=52768 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043435.412:5491): pid=14341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52768 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043435.412:5492): pid=14341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52768 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043435.419:5493): pid=14341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043435.421:5494): pid=14341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14342 suid=74 rport=52768 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043435.423:5495): pid=14341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043435.423:5496): pid=14341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043435.424:5497): pid=14341 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=75 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043435.669:5498): pid=14341 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043435.699:5499): pid=14341 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043435.743:5500): pid=14341 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043435.743:5501): pid=14341 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043435.746:5502): pid=14344 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043435.746:5503): pid=14344 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043435.746:5504): pid=14344 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043435.748:5505): pid=14344 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043435.770:5506): pid=14341 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043435.771:5507): pid=14341 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043435.771:5508): pid=14341 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043435.771:5509): pid=14341 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043435.771:5510): pid=14341 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043435.771:5511): pid=14341 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043435.771:5512): pid=14341 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043435.771:5513): pid=14341 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14341 suid=0 rport=52768 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043436.840:5514): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-cinder-1:12.0.3-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043436.911:5515): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="device-mapper-persistent-data-0.7.3-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043437.301:5516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=lvm2-lvmetad comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043437.342:5517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=lvm2-monitor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043437.540:5518): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="lvm2-7:2.02.180-8.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043437.569:5519): pid=14455 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=165 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043437.573:5520): pid=14455 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=165 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043437.591:5521): pid=14460 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=165 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043437.591:5522): pid=14460 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="nobody" acct="cinder" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043437.592:5523): pid=14460 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="cinder" acct="cinder" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043437.592:5524): pid=14460 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-to-shadow-group grp="nobody" acct="cinder" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043437.592:5525): pid=14460 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-to-shadow-group grp="cinder" acct="cinder" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043437.891:5526): pid=14073 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-cinder-1:12.0.3-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043438.804:5527): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043438.805:5528): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043438.805:5529): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043438.807:5530): pid=14566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14567 suid=74 rport=52770 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043438.807:5531): pid=14566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14567 suid=74 rport=52770 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043438.863:5532): pid=14566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52770 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043438.863:5533): pid=14566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52770 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043438.869:5534): pid=14566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043438.870:5535): pid=14566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14567 suid=74 rport=52770 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043438.871:5536): pid=14566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043438.871:5537): pid=14566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043438.872:5538): pid=14566 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=76 res=1 >type=NETFILTER_CFG msg=audit(1538043438.911:5539): table=filter family=2 entries=10 >type=SYSCALL msg=audit(1538043438.911:5539): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=c07470 items=0 ppid=12057 pid=14575 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043438.911:5539): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540031002D2D77616974002D740066696C746572002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730036303830002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E7400303031206E6F766E6370726F78792069 >type=USER_ROLE_CHANGE msg=audit(1538043439.037:5540): pid=14566 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043439.053:5541): pid=14566 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043439.096:5542): pid=14566 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043439.096:5543): pid=14566 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043439.097:5544): pid=14622 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14622 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043439.097:5545): pid=14622 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14622 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043439.097:5546): pid=14622 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14622 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043439.097:5547): pid=14622 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043439.113:5548): pid=14566 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043439.113:5549): pid=14566 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043439.114:5550): pid=14566 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043439.114:5551): pid=14566 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043439.114:5552): pid=14566 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043439.114:5553): pid=14566 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043439.114:5554): pid=14566 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043439.114:5555): pid=14566 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14566 suid=0 rport=52770 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043442.147:5556): pid=14652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043442.147:5557): pid=14652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043442.147:5558): pid=14652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043442.149:5559): pid=14651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14652 suid=74 rport=52790 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043442.149:5560): pid=14651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14652 suid=74 rport=52790 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043442.206:5561): pid=14651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52790 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043442.206:5562): pid=14651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52790 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043442.212:5563): pid=14651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043442.213:5564): pid=14651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14652 suid=74 rport=52790 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043442.215:5565): pid=14651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043442.215:5566): pid=14651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043442.215:5567): pid=14651 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=77 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043442.384:5568): pid=14651 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043442.401:5569): pid=14651 uid=0 auid=0 ses=77 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043442.444:5570): pid=14651 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043442.444:5571): pid=14651 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043442.445:5572): pid=14654 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043442.445:5573): pid=14654 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043442.445:5574): pid=14654 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043442.447:5575): pid=14654 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043442.466:5576): pid=14651 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043442.466:5577): pid=14651 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043442.466:5578): pid=14651 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043442.466:5579): pid=14651 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043442.467:5580): pid=14651 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14651 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043442.467:5581): pid=14651 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14651 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043442.467:5582): pid=14651 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14651 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043442.467:5583): pid=14651 uid=0 auid=0 ses=77 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14651 suid=0 rport=52790 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043443.275:5584): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="ipset-libs-6.38-2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043443.430:5585): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-openvswitch-2.9.0-56.el7fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043443.679:5586): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="net-snmp-libs-1:5.7.2-37.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043443.818:5587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043443.818:5588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043443.819:5589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043443.831:5590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043443.874:5591): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-ovsdbapp-0.10.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043443.896:5592): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="ipset-6.38-2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043443.914:5593): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="dnsmasq-utils-2.76-5.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043444.061:5594): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-designateclient-2.9.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043444.245:5595): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-pyroute2-0.4.21-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043444.347:5596): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-os-xenapi-0.3.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043444.383:5597): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-weakrefmethod-1.0.2-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043444.626:5598): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-werkzeug-0.9.1-2.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043444.681:5599): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-beautifulsoup4-4.6.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043444.706:5600): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libev-4.15-7.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043444.727:5601): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="lm_sensors-libs-3.4.0-6.20160601gitf9185e5.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043444.832:5602): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="net-snmp-agent-libs-1:5.7.2-37.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043444.988:5603): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="keepalived-1.3.5-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043445.090:5604): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="dnsmasq-2.76-7.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043445.107:5605): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-ryu-common-4.15-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043445.136:5606): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-logutils-0.3.3-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043445.220:5607): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-waitress-0.8.10-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043445.264:5608): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-webtest-2.0.23-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043445.294:5609): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="c-ares-1.10.0-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043445.379:5610): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-gevent-1.0-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043445.407:5611): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-tinyrpc-0.5-4.20170523git1f38ac.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043445.500:5612): pid=14705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043445.500:5613): pid=14705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043445.500:5614): pid=14705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043445.502:5615): pid=14704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14705 suid=74 rport=52792 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043445.502:5616): pid=14704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14705 suid=74 rport=52792 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043445.560:5617): pid=14704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52792 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043445.560:5618): pid=14704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52792 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043445.567:5619): pid=14704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043445.568:5620): pid=14704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14705 suid=74 rport=52792 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043445.569:5621): pid=14704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043445.569:5622): pid=14704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043445.570:5623): pid=14704 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=78 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043445.736:5624): pid=14704 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043445.752:5625): pid=14704 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043445.795:5626): pid=14704 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043445.795:5627): pid=14704 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043445.797:5628): pid=14707 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14707 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043445.797:5629): pid=14707 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14707 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043445.797:5630): pid=14707 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14707 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043445.798:5631): pid=14707 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043445.819:5632): pid=14704 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043445.820:5633): pid=14704 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043445.820:5634): pid=14704 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043445.820:5635): pid=14704 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043445.820:5636): pid=14704 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043445.820:5637): pid=14704 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043445.820:5638): pid=14704 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043445.820:5639): pid=14704 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14704 suid=0 rport=52792 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043446.299:5640): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-ryu-4.15-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043446.357:5641): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="dibbler-client-1.0.1-0.RC1.3.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043446.388:5642): pid=14713 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=188 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043446.390:5643): pid=14713 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=188 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043446.402:5644): pid=14719 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=188 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043446.648:5645): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="haproxy-1.5.18-8.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043446.683:5646): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libnetfilter_queue-1.0.2-2.el7_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043446.703:5647): pid=14744 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=75 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043446.705:5648): pid=14744 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=75 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043446.715:5649): pid=14749 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=75 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043446.834:5650): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="radvd-2.17-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043447.154:5651): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-neutron-lib-1.13.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043447.181:5652): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libnetfilter_cthelper-1.0.0-9.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043447.199:5653): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-singledispatch-3.4.0.3-2.1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043447.373:5654): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-pecan-1.1.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043448.893:5655): pid=14777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043448.893:5656): pid=14777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043448.893:5657): pid=14777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043448.896:5658): pid=14776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14777 suid=74 rport=52794 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043448.896:5659): pid=14776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14777 suid=74 rport=52794 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043448.978:5660): pid=14776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52794 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043448.978:5661): pid=14776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52794 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043448.989:5662): pid=14776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043448.990:5663): pid=14776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14777 suid=74 rport=52794 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043448.992:5664): pid=14776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043448.993:5665): pid=14776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043448.993:5666): pid=14776 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=79 res=1 >type=SOFTWARE_UPDATE msg=audit(1538043449.160:5667): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-neutron-1:12.0.3-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043449.196:5668): pid=14776 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=ADD_GROUP msg=audit(1538043449.205:5669): pid=14781 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=993 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043449.208:5670): pid=14781 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=993 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043449.216:5671): pid=14776 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=ADD_USER msg=audit(1538043449.224:5672): pid=14786 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=996 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538043449.261:5673): pid=14776 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043449.261:5674): pid=14776 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043449.264:5675): pid=14791 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043449.264:5676): pid=14791 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043449.264:5677): pid=14791 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043449.265:5678): pid=14791 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043449.299:5679): pid=14776 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043449.300:5680): pid=14776 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043449.300:5681): pid=14776 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043449.301:5682): pid=14776 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043449.301:5683): pid=14776 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043449.301:5684): pid=14776 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043449.301:5685): pid=14776 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043449.301:5686): pid=14776 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14776 suid=0 rport=52794 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043449.347:5687): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-neutron-common-1:12.0.3-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043449.387:5688): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libnetfilter_cttimeout-1.0.0-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043449.590:5689): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="conntrack-tools-1.4.4-4.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043450.269:5690): pid=14619 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-neutron-1:12.0.3-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043452.342:5691): pid=14943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043452.342:5692): pid=14943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043452.342:5693): pid=14943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043452.345:5694): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14943 suid=74 rport=52796 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043452.345:5695): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14943 suid=74 rport=52796 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043452.445:5696): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043452.445:5697): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043452.455:5698): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043452.456:5699): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14943 suid=74 rport=52796 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043452.458:5700): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043452.458:5701): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043452.458:5702): pid=14942 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=80 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043452.622:5703): pid=14942 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043452.643:5704): pid=14942 uid=0 auid=0 ses=80 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043452.687:5705): pid=14942 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043452.688:5706): pid=14942 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043452.691:5707): pid=14945 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043452.691:5708): pid=14945 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043452.691:5709): pid=14945 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043452.693:5710): pid=14945 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043452.730:5711): pid=14942 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043452.731:5712): pid=14942 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043452.732:5713): pid=14942 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043452.732:5714): pid=14942 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043452.732:5715): pid=14942 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043452.732:5716): pid=14942 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043452.732:5717): pid=14942 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043452.732:5718): pid=14942 uid=0 auid=0 ses=80 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14942 suid=0 rport=52796 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043454.281:5719): pid=14932 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-neutron-fwaas-1:12.0.1-0.20180409052822.384366b.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043454.301:5720): pid=14932 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-neutron-fwaas-1:12.0.1-0.20180409052822.384366b.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043455.318:5721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043455.318:5722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043455.320:5723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043455.337:5724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043455.779:5725): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043455.779:5726): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043455.779:5727): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043455.782:5728): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14973 suid=74 rport=52802 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043455.782:5729): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14973 suid=74 rport=52802 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043455.840:5730): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52802 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043455.840:5731): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52802 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043455.849:5732): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043455.850:5733): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14973 suid=74 rport=52802 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043455.852:5734): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043455.852:5735): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043455.853:5736): pid=14972 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=81 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043456.082:5737): pid=14972 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043456.112:5738): pid=14972 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043456.154:5739): pid=14972 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043456.154:5740): pid=14972 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043456.157:5741): pid=14975 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043456.157:5742): pid=14975 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043456.157:5743): pid=14975 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043456.158:5744): pid=14975 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043456.191:5745): pid=14972 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043456.191:5746): pid=14972 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043456.192:5747): pid=14972 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043456.192:5748): pid=14972 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043456.192:5749): pid=14972 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043456.192:5750): pid=14972 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043456.193:5751): pid=14972 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043456.193:5752): pid=14972 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14972 suid=0 rport=52802 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043459.230:5753): pid=14985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043459.230:5754): pid=14985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043459.230:5755): pid=14985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043459.231:5756): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14985 suid=74 rport=52806 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043459.232:5757): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=14985 suid=74 rport=52806 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043459.288:5758): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52806 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043459.288:5759): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52806 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043459.294:5760): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043459.295:5761): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14985 suid=74 rport=52806 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043459.296:5762): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043459.296:5763): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043459.296:5764): pid=14984 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=82 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043459.454:5765): pid=14984 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043459.473:5766): pid=14984 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043459.516:5767): pid=14984 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043459.517:5768): pid=14984 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043459.519:5769): pid=14987 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043459.520:5770): pid=14987 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043459.520:5771): pid=14987 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043459.521:5772): pid=14987 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043459.542:5773): pid=14984 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043459.542:5774): pid=14984 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043459.542:5775): pid=14984 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043459.542:5776): pid=14984 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043459.543:5777): pid=14984 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=14984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043459.543:5778): pid=14984 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=14984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043459.543:5779): pid=14984 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=14984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043459.543:5780): pid=14984 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14984 suid=0 rport=52806 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043459.600:5781): pid=14959 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-neutron-lbaas-1:12.0.1-0.20180424200349.cdbf25c.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043460.567:5782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043460.567:5783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043460.569:5784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043460.579:5785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043462.590:5786): pid=15015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043462.591:5787): pid=15015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043462.591:5788): pid=15015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043462.594:5789): pid=15014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15015 suid=74 rport=52812 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043462.594:5790): pid=15014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15015 suid=74 rport=52812 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043462.682:5791): pid=15014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52812 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043462.682:5792): pid=15014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52812 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043462.694:5793): pid=15014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043462.695:5794): pid=15014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15015 suid=74 rport=52812 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043462.696:5795): pid=15014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043462.696:5796): pid=15014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043462.696:5797): pid=15014 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=83 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043462.853:5798): pid=15014 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043462.880:5799): pid=15014 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043462.922:5800): pid=15014 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043462.922:5801): pid=15014 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043462.925:5802): pid=15017 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15017 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043462.925:5803): pid=15017 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15017 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043462.925:5804): pid=15017 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15017 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043462.927:5805): pid=15017 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043462.950:5806): pid=15014 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043462.950:5807): pid=15014 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043462.951:5808): pid=15014 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043462.951:5809): pid=15014 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043462.951:5810): pid=15014 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15014 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043462.951:5811): pid=15014 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15014 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043462.951:5812): pid=15014 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15014 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043462.951:5813): pid=15014 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15014 suid=0 rport=52812 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043463.337:5814): pid=14997 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libxslt-python-1.1.28-5.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043463.648:5815): pid=14997 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-ncclient-0.4.7-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043463.658:5816): pid=14997 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-neutron-ml2-1:12.0.3-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043465.818:5817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043465.818:5818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043465.820:5819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043465.837:5820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043466.006:5821): pid=15053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043466.007:5822): pid=15053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043466.008:5823): pid=15053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043466.010:5824): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15053 suid=74 rport=52814 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043466.010:5825): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15053 suid=74 rport=52814 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043466.108:5826): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52814 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043466.108:5827): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52814 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043466.117:5828): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043466.117:5829): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15053 suid=74 rport=52814 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043466.119:5830): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043466.119:5831): pid=15052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043466.119:5832): pid=15052 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=84 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043466.272:5833): pid=15052 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043466.297:5834): pid=15052 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043466.342:5835): pid=15052 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043466.343:5836): pid=15052 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043466.346:5837): pid=15055 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043466.346:5838): pid=15055 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043466.346:5839): pid=15055 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043466.348:5840): pid=15055 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043466.371:5841): pid=15052 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043466.372:5842): pid=15052 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043466.372:5843): pid=15052 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043466.373:5844): pid=15052 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043466.373:5845): pid=15052 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15052 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043466.373:5846): pid=15052 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15052 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043466.373:5847): pid=15052 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15052 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043466.373:5848): pid=15052 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15052 suid=0 rport=52814 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043469.428:5849): pid=15079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043469.428:5850): pid=15079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043469.428:5851): pid=15079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043469.431:5852): pid=15078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15079 suid=74 rport=52832 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043469.431:5853): pid=15078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15079 suid=74 rport=52832 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043469.500:5854): pid=15078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52832 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043469.500:5855): pid=15078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52832 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043469.508:5856): pid=15078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043469.508:5857): pid=15078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15079 suid=74 rport=52832 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043469.510:5858): pid=15078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043469.510:5859): pid=15078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043469.510:5860): pid=15078 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=85 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043469.665:5861): pid=15078 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043469.683:5862): pid=15078 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043469.727:5863): pid=15078 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043469.728:5864): pid=15078 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043469.731:5865): pid=15083 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043469.731:5866): pid=15083 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043469.731:5867): pid=15083 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15083 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043469.732:5868): pid=15083 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043469.764:5869): pid=15078 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043469.764:5870): pid=15078 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043469.765:5871): pid=15078 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043469.765:5872): pid=15078 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043469.765:5873): pid=15078 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043469.765:5874): pid=15078 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043469.766:5875): pid=15078 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043469.766:5876): pid=15078 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15078 suid=0 rport=52832 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043471.067:5877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043471.067:5878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043471.071:5879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043471.086:5880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043472.189:5881): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-1.0.1-8.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043472.196:5882): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="web-assets-filesystem-5-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043472.811:5883): pid=15096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043472.811:5884): pid=15096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043472.811:5885): pid=15096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043472.814:5886): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15096 suid=74 rport=52838 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043472.814:5887): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15096 suid=74 rport=52838 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043472.904:5888): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52838 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043472.904:5889): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52838 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043472.914:5890): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043472.915:5891): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15096 suid=74 rport=52838 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043472.918:5892): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043472.918:5893): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043472.918:5894): pid=15095 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=86 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043473.099:5895): pid=15095 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043473.120:5896): pid=15095 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043473.163:5897): pid=15095 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043473.163:5898): pid=15095 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043473.166:5899): pid=15098 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043473.166:5900): pid=15098 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043473.166:5901): pid=15098 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15098 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043473.168:5902): pid=15098 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043473.195:5903): pid=15095 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043473.196:5904): pid=15095 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043473.196:5905): pid=15095 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043473.196:5906): pid=15095 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043473.196:5907): pid=15095 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043473.196:5908): pid=15095 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043473.196:5909): pid=15095 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043473.196:5910): pid=15095 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15095 suid=0 rport=52838 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043475.442:5911): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-django-1.11.10-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043475.450:5912): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="fontpackages-filesystem-1.44-8.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043475.505:5913): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="apr-1.4.8-3.el7_4.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043475.533:5914): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="apr-util-1.5.2-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043475.573:5915): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="fontawesome-fonts-4.4.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043475.616:5916): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="fontawesome-fonts-web-4.4.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043475.655:5917): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-django-appconf-1.0.1-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043475.741:5918): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-scss-1.3.4-7.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043475.753:5919): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Font-Awesome-4.7.0.0-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043475.772:5920): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="httpd-tools-2.4.6-88.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043476.248:5921): pid=15109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15109 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043476.249:5922): pid=15109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15109 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043476.249:5923): pid=15109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15109 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043476.251:5924): pid=15108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15109 suid=74 rport=52840 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043476.251:5925): pid=15108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15109 suid=74 rport=52840 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043476.269:5926): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="roboto-fontface-fonts-0.5.0.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043476.305:5927): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="bootswatch-fonts-3.3.7.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538043476.308:5928): pid=15108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52840 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043476.308:5929): pid=15108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52840 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043476.318:5930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043476.319:5931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043476.319:5932): pid=15108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043476.319:5933): pid=15108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15109 suid=74 rport=52840 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043476.321:5934): pid=15108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043476.321:5935): pid=15108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043476.321:5936): pid=15108 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=87 res=1 >type=SERVICE_START msg=audit(1538043476.321:5937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043476.337:5938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043476.417:5939): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mdi-fonts-1.4.57.0-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043476.492:5940): pid=15108 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043476.516:5941): pid=15108 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043476.562:5942): pid=15108 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043476.562:5943): pid=15108 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043476.566:5944): pid=15114 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043476.567:5945): pid=15114 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043476.567:5946): pid=15114 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043476.569:5947): pid=15114 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043476.604:5948): pid=15108 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043476.605:5949): pid=15108 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043476.606:5950): pid=15108 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043476.606:5951): pid=15108 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043476.606:5952): pid=15108 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043476.606:5953): pid=15108 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043476.606:5954): pid=15108 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15108 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043476.606:5955): pid=15108 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15108 suid=0 rport=52840 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.301:5956): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-django-horizon-1:13.0.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.316:5957): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Angular-lrdragndrop-1.0.2.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.363:5958): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Bootstrap-Datepicker-1.3.1.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.380:5959): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-JQuery-Migrate-1.2.1.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.464:5960): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="roboto-fontface-common-0.5.0.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.491:5961): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-roboto-fontface-0.5.0.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.515:5962): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="xstatic-angular-bootstrap-common-2.2.0.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.541:5963): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Angular-Bootstrap-2.2.0.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.579:5964): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mdi-common-1.4.57.0-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.611:5965): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-mdi-1.4.57.0-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.642:5966): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-JQuery-TableSorter-2.14.5.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.671:5967): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-JQuery-quicksearch-2.0.3.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.685:5968): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="xstatic-objectpath-common-1.2.1.0-0.1.pre_review.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.713:5969): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-objectpath-1.2.1.0-0.1.pre_review.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.731:5970): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="xstatic-termjs-common-0.0.7.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.756:5971): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-termjs-0.0.7.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.771:5972): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="xstatic-angular-gettext-common-2.3.8.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043477.797:5973): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Angular-Gettext-2.3.8.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.194:5974): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="bootswatch-common-3.3.7.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.223:5975): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-bootswatch-3.3.7.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.235:5976): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="xstatic-smart-table-common-1.4.13.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.260:5977): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-smart-table-1.4.13.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.293:5978): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Rickshaw-1.5.0.0-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.322:5979): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Hogan-2.0.0.2-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.348:5980): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="xstatic-angular-schema-form-common-0.8.13.0-0.1.pre_review.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.376:5981): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Angular-Schema-Form-0.8.13.0-0.1.pre_review.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.408:5982): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Magic-Search-0.2.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.440:5983): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Spin-1.2.5.2-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.590:5984): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="xstatic-angular-fileupload-common-12.0.4.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.605:5985): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Angular-FileUpload-12.0.4.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.682:5986): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="xstatic-bootstrap-scss-common-3.3.7.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.694:5987): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Bootstrap-SCSS-3.3.7.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.891:5988): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-jquery-ui-1.10.4.1-1.el7ost.1.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.909:5989): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="xstatic-tv4-common-1.2.7.0-0.1.pre_review.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.937:5990): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-tv4-1.2.7.0-0.1.pre_review.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.955:5991): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="xstatic-jsencrypt-common-2.3.1.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043478.982:5992): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-JSEncrypt-2.3.1.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043479.135:5993): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="XStatic-Angular-common-1:1.5.8.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043479.167:5994): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Angular-1:1.5.8.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043479.195:5995): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="xstatic-d3-common-3.5.17.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043479.220:5996): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-D3-3.5.17.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043479.246:5997): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="xstatic-jasmine-common-2.4.1.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043479.272:5998): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-Jasmine-2.4.1.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043479.323:5999): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-XStatic-jQuery-1.10.2.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043479.346:6000): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-rjsmin-1.0.12-3.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043479.464:6001): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-versiontools-1.9.1-8.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043479.546:6002): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-pathlib-1.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043479.593:6003): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-django-pyscss-2.0.2-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043479.632:6004): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-semantic_version-2.4.2-2.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043479.663:6005): pid=15122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043479.663:6006): pid=15122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043479.664:6007): pid=15122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043479.667:6008): pid=15121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15122 suid=74 rport=52842 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043479.667:6009): pid=15121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15122 suid=74 rport=52842 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043479.768:6010): pid=15121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52842 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043479.768:6011): pid=15121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52842 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043479.780:6012): pid=15121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043479.782:6013): pid=15121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15122 suid=74 rport=52842 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043479.784:6014): pid=15121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043479.785:6015): pid=15121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043479.785:6016): pid=15121 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=88 res=1 >type=SOFTWARE_UPDATE msg=audit(1538043479.793:6017): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-pint-0.6-5.1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043480.006:6018): pid=15121 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043480.029:6019): pid=15121 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043480.072:6020): pid=15121 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043480.072:6021): pid=15121 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043480.076:6022): pid=15124 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043480.076:6023): pid=15124 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043480.076:6024): pid=15124 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043480.077:6025): pid=15124 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043480.090:6026): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-dashboard-theme-1:13.0.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043480.108:6027): pid=15121 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043480.108:6028): pid=15121 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043480.109:6029): pid=15121 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043480.110:6030): pid=15121 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043480.110:6031): pid=15121 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043480.110:6032): pid=15121 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043480.110:6033): pid=15121 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043480.110:6034): pid=15121 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15121 suid=0 rport=52842 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043480.208:6035): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-bson-3.0.3-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043480.342:6036): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-pymongo-3.0.3-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043480.408:6037): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-lesscpy-0.9j-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043481.578:6038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043481.578:6039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043481.580:6040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043481.594:6041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043481.690:6042): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="redhat-logos-70.0.3-7.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043481.718:6043): pid=15136 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=48 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043481.721:6044): pid=15136 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=48 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043481.732:6045): pid=15140 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=48 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043482.183:6046): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="httpd-2.4.6-88.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043482.202:6047): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mod_wsgi-3.4-18.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043482.217:6048): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-rcssmin-1.0.6-3.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043482.365:6049): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-django-compressor-2.1-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043483.173:6050): pid=15166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043483.173:6051): pid=15166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043483.174:6052): pid=15166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043483.176:6053): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15166 suid=74 rport=52844 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043483.176:6054): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15166 suid=74 rport=52844 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043483.264:6055): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52844 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043483.264:6056): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52844 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043483.272:6057): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043483.273:6058): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15166 suid=74 rport=52844 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043483.274:6059): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043483.275:6060): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043483.275:6061): pid=15165 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=89 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043483.433:6062): pid=15165 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043483.451:6063): pid=15165 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043483.495:6064): pid=15165 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043483.495:6065): pid=15165 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043483.498:6066): pid=15168 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043483.498:6067): pid=15168 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043483.498:6068): pid=15168 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043483.499:6069): pid=15168 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043483.530:6070): pid=15165 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043483.530:6071): pid=15165 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043483.530:6072): pid=15165 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043483.530:6073): pid=15165 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043483.530:6074): pid=15165 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043483.530:6075): pid=15165 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043483.530:6076): pid=15165 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043483.530:6077): pid=15165 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15165 suid=0 rport=52844 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043486.580:6078): pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15176 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043486.580:6079): pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15176 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043486.580:6080): pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15176 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043486.582:6081): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15176 suid=74 rport=52846 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043486.582:6082): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15176 suid=74 rport=52846 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043486.642:6083): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52846 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043486.642:6084): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52846 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043486.653:6085): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043486.653:6086): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15176 suid=74 rport=52846 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043486.657:6087): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043486.657:6088): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043486.657:6089): pid=15175 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=90 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043486.893:6090): pid=15175 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043486.923:6091): pid=15175 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043486.968:6092): pid=15175 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043486.968:6093): pid=15175 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043486.971:6094): pid=15178 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043486.971:6095): pid=15178 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043486.971:6096): pid=15178 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043486.972:6097): pid=15178 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043487.004:6098): pid=15175 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043487.005:6099): pid=15175 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043487.006:6100): pid=15175 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043487.006:6101): pid=15175 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043487.006:6102): pid=15175 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043487.006:6103): pid=15175 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043487.006:6104): pid=15175 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043487.006:6105): pid=15175 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15175 suid=0 rport=52846 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043487.317:6106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043487.317:6107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043487.318:6108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043487.335:6109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043488.924:6110): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-dashboard-1:13.0.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043489.249:6111): pid=15039 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-neutron-lbaas-ui-4.0.1-0.20180326210834.a2c502e.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043490.036:6112): pid=15225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043490.036:6113): pid=15225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043490.036:6114): pid=15225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043490.038:6115): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15225 suid=74 rport=52848 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043490.038:6116): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15225 suid=74 rport=52848 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043490.114:6117): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52848 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043490.114:6118): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52848 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043490.121:6119): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043490.122:6120): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15225 suid=74 rport=52848 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043490.123:6121): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043490.123:6122): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043490.123:6123): pid=15221 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=91 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043490.281:6124): pid=15221 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043490.301:6125): pid=15221 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043490.343:6126): pid=15221 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043490.343:6127): pid=15221 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043490.344:6128): pid=15231 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043490.344:6129): pid=15231 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043490.345:6130): pid=15231 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15231 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043490.346:6131): pid=15231 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043490.378:6132): pid=15221 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043490.379:6133): pid=15221 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043490.379:6134): pid=15221 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043490.379:6135): pid=15221 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043490.379:6136): pid=15221 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043490.379:6137): pid=15221 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043490.379:6138): pid=15221 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043490.380:6139): pid=15221 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15221 suid=0 rport=52848 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=ADD_GROUP msg=audit(1538043491.406:6140): pid=15239 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=992 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043491.409:6141): pid=15239 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=992 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043491.421:6142): pid=15244 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=995 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043491.605:6143): pid=15222 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="memcached-0:1.4.39-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043491.916:6144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=memcached comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538043492.713:6145): table=filter family=2 entries=11 >type=SYSCALL msg=audit(1538043492.713:6145): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=120f900 items=0 ppid=12057 pid=15355 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043492.713:6145): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540031002D2D77616974002D740066696C746572002D7000746370002D6D006D756C7469706F7274002D2D64706F727473003830002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E740030303120686F72697A6F6E20383020696E63 >type=CRYPTO_KEY_USER msg=audit(1538043493.438:6146): pid=15415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043493.438:6147): pid=15415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043493.438:6148): pid=15415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043493.441:6149): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15415 suid=74 rport=52852 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043493.441:6150): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15415 suid=74 rport=52852 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043493.547:6151): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52852 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043493.547:6152): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52852 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043493.554:6153): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043493.554:6154): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15415 suid=74 rport=52852 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043493.555:6155): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043493.556:6156): pid=15414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043493.556:6157): pid=15414 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=92 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043493.722:6158): pid=15414 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043493.740:6159): pid=15414 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043493.782:6160): pid=15414 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043493.782:6161): pid=15414 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043493.785:6162): pid=15417 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043493.785:6163): pid=15417 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043493.785:6164): pid=15417 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043493.786:6165): pid=15417 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043493.818:6166): pid=15414 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043493.818:6167): pid=15414 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043493.818:6168): pid=15414 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043493.818:6169): pid=15414 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043493.818:6170): pid=15414 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043493.819:6171): pid=15414 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043493.819:6172): pid=15414 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043493.819:6173): pid=15414 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15414 suid=0 rport=52852 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043495.562:6174): pid=15404 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="liberasurecode-1.5.0-4.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043495.586:6175): pid=15404 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-pyeclib-1.5.0-3.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043495.745:6176): pid=15404 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-dns-1.15.0-5.1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043495.775:6177): pid=15429 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=160 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043495.777:6178): pid=15429 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=160 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043495.790:6179): pid=15434 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=160 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043496.394:6180): pid=15404 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-swift-2.17.1-0.20180314165245.caeeb54.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043496.873:6181): pid=15456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043496.873:6182): pid=15456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043496.873:6183): pid=15456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043496.876:6184): pid=15452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15456 suid=74 rport=52858 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043496.876:6185): pid=15452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15456 suid=74 rport=52858 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043496.956:6186): pid=15452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52858 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043496.956:6187): pid=15452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52858 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043496.967:6188): pid=15452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043496.968:6189): pid=15452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15456 suid=74 rport=52858 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043496.970:6190): pid=15452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043496.970:6191): pid=15452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043496.970:6192): pid=15452 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=93 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043497.212:6193): pid=15452 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043497.222:6194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043497.222:6195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043497.224:6196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043497.279:6197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043497.289:6198): pid=15452 uid=0 auid=0 ses=93 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043497.331:6199): pid=15452 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043497.331:6200): pid=15452 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043497.333:6201): pid=15465 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043497.334:6202): pid=15465 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043497.334:6203): pid=15465 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043497.336:6204): pid=15465 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043497.356:6205): pid=15452 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043497.356:6206): pid=15452 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043497.357:6207): pid=15452 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043497.357:6208): pid=15452 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043497.357:6209): pid=15452 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043497.357:6210): pid=15452 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043497.357:6211): pid=15452 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043497.357:6212): pid=15452 uid=0 auid=0 ses=93 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15452 suid=0 rport=52858 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043498.521:6213): pid=15453 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="xinetd-2:2.3.15-13.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=MAC_CONFIG_CHANGE msg=audit(1538043499.130:6214): bool=rsync_export_all_ro val=1 old_val=0 auid=0 ses=16 >type=SYSCALL msg=audit(1538043499.130:6214): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7ffc1444df60 a2=2 a3=7ffc1444d9e0 items=0 ppid=15491 pid=15492 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043499.130:6214): proctitle=2F7573722F7362696E2F7365747365626F6F6C002D50007273796E635F6578706F72745F616C6C5F726F006F6E >type=USER_AVC msg=audit(1538043499.137:6215): pid=2252 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=9) exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' >type=CRYPTO_KEY_USER msg=audit(1538043500.396:6216): pid=15502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043500.396:6217): pid=15502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043500.396:6218): pid=15502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043500.398:6219): pid=15501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15502 suid=74 rport=52862 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043500.398:6220): pid=15501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15502 suid=74 rport=52862 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043500.458:6221): pid=15501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52862 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043500.458:6222): pid=15501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52862 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043500.464:6223): pid=15501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043500.465:6224): pid=15501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15502 suid=74 rport=52862 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043500.466:6225): pid=15501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043500.467:6226): pid=15501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043500.467:6227): pid=15501 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=94 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043500.627:6228): pid=15501 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_AVC msg=audit(1538043500.638:6229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=9) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1538043500.647:6230): pid=15501 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043500.689:6231): pid=15501 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043500.689:6232): pid=15501 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043500.691:6233): pid=15504 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043500.691:6234): pid=15504 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043500.691:6235): pid=15504 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043500.692:6236): pid=15504 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043500.714:6237): pid=15501 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043500.714:6238): pid=15501 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043500.715:6239): pid=15501 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043500.715:6240): pid=15501 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043500.715:6241): pid=15501 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043500.715:6242): pid=15501 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043500.715:6243): pid=15501 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043500.715:6244): pid=15501 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15501 suid=0 rport=52862 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AVC msg=audit(1538043501.283:6245): pid=2252 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=10) exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' >type=MAC_POLICY_LOAD msg=audit(1538043499.477:6246): policy loaded auid=0 ses=16 >type=SYSCALL msg=audit(1538043499.477:6246): arch=c000003e syscall=1 success=yes exit=3930094 a0=4 a1=7f4adc899000 a2=3bf7ee a3=7ffc66b1a020 items=0 ppid=15492 pid=15497 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043499.477:6246): proctitle="/sbin/load_policy" >type=SOFTWARE_UPDATE msg=audit(1538043503.305:6247): pid=15514 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-ceilometermiddleware-1.2.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_AVC msg=audit(1538043503.345:6248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=10) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SOFTWARE_UPDATE msg=audit(1538043503.471:6249): pid=15514 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-swift-proxy-2.17.1-0.20180314165245.caeeb54.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043503.745:6250): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043503.745:6251): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043503.745:6252): pid=15568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043503.747:6253): pid=15564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15568 suid=74 rport=52868 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043503.747:6254): pid=15564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15568 suid=74 rport=52868 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043503.807:6255): pid=15564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52868 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043503.807:6256): pid=15564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52868 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043503.814:6257): pid=15564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043503.815:6258): pid=15564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15568 suid=74 rport=52868 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043503.817:6259): pid=15564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043503.817:6260): pid=15564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043503.817:6261): pid=15564 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=95 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043503.987:6262): pid=15564 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043504.009:6263): pid=15564 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043504.051:6264): pid=15564 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043504.051:6265): pid=15564 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043504.052:6266): pid=15577 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043504.053:6267): pid=15577 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043504.053:6268): pid=15577 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043504.053:6269): pid=15577 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043504.073:6270): pid=15564 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043504.074:6271): pid=15564 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043504.074:6272): pid=15564 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043504.074:6273): pid=15564 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043504.074:6274): pid=15564 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15564 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043504.074:6275): pid=15564 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15564 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043504.074:6276): pid=15564 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15564 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043504.074:6277): pid=15564 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15564 suid=0 rport=52868 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043506.923:6278): pid=15569 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-mistralclient-3.3.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043507.111:6279): pid=15589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15589 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043507.111:6280): pid=15589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15589 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043507.111:6281): pid=15589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15589 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043507.115:6282): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15589 suid=74 rport=52874 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043507.115:6283): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15589 suid=74 rport=52874 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043507.209:6284): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52874 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043507.209:6285): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52874 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043507.217:6286): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043507.218:6287): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15589 suid=74 rport=52874 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043507.220:6288): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043507.220:6289): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043507.220:6290): pid=15588 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=96 res=1 >type=SOFTWARE_UPDATE msg=audit(1538043507.366:6291): pid=15569 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-troveclient-2.14.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043507.378:6292): pid=15588 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043507.407:6293): pid=15588 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043507.434:6294): pid=15569 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-ceilometerclient-2.9.0-0.20180210123537.3b4e35a.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538043507.450:6295): pid=15588 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043507.450:6296): pid=15588 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043507.453:6297): pid=15591 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043507.453:6298): pid=15591 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043507.454:6299): pid=15591 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043507.455:6300): pid=15591 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043507.482:6301): pid=15569 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-octaviaclient-1.4.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043507.489:6302): pid=15588 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043507.490:6303): pid=15588 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043507.491:6304): pid=15588 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043507.491:6305): pid=15588 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043507.491:6306): pid=15588 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043507.492:6307): pid=15588 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043507.492:6308): pid=15588 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043507.492:6309): pid=15588 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15588 suid=0 rport=52874 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043507.503:6310): pid=15569 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-croniter-0.3.19-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043508.030:6311): pid=15569 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-manilaclient-1.21.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043508.305:6312): pid=15569 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-zaqarclient-1.9.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043508.413:6313): pid=15569 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-yaql-1.1.3-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043508.454:6314): pid=15569 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-aodhclient-1.0.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043508.547:6315): pid=15569 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-heatclient-1.14.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043508.567:6316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043508.567:6317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043508.569:6318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043508.631:6319): pid=15569 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-magnumclient-2.9.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043508.635:6320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043508.945:6321): pid=15569 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-saharaclient-1.5.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043508.992:6322): pid=15601 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=187 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043508.995:6323): pid=15601 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=187 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043509.012:6324): pid=15606 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=187 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043510.088:6325): pid=15569 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-heat-common-1:10.0.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043510.530:6326): pid=15618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043510.530:6327): pid=15618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043510.530:6328): pid=15618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043510.533:6329): pid=15617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15618 suid=74 rport=52876 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043510.534:6330): pid=15617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15618 suid=74 rport=52876 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043510.594:6331): pid=15617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52876 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043510.594:6332): pid=15617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52876 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043510.604:6333): pid=15617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043510.605:6334): pid=15617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15618 suid=74 rport=52876 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043510.607:6335): pid=15617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043510.607:6336): pid=15617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043510.607:6337): pid=15617 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=97 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043510.769:6338): pid=15617 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043510.791:6339): pid=15617 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043510.836:6340): pid=15617 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043510.836:6341): pid=15617 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043510.837:6342): pid=15627 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043510.838:6343): pid=15627 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043510.838:6344): pid=15627 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043510.839:6345): pid=15627 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043510.864:6346): pid=15617 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043510.865:6347): pid=15617 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043510.866:6348): pid=15617 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043510.866:6349): pid=15617 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043510.866:6350): pid=15617 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043510.866:6351): pid=15617 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043510.866:6352): pid=15617 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043510.867:6353): pid=15617 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15617 suid=0 rport=52876 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043512.595:6354): pid=15622 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-heat-api-1:10.0.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043513.907:6355): pid=15670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043513.908:6356): pid=15670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043513.908:6357): pid=15670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043513.910:6358): pid=15669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15670 suid=74 rport=52880 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043513.911:6359): pid=15669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15670 suid=74 rport=52880 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043514.012:6360): pid=15669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52880 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043514.012:6361): pid=15669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52880 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043514.021:6362): pid=15669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043514.022:6363): pid=15669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15670 suid=74 rport=52880 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043514.024:6364): pid=15669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043514.024:6365): pid=15669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043514.024:6366): pid=15669 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=98 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043514.245:6367): pid=15669 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043514.267:6368): pid=15669 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043514.312:6369): pid=15669 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043514.312:6370): pid=15669 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043514.314:6371): pid=15674 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043514.314:6372): pid=15674 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043514.314:6373): pid=15674 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043514.316:6374): pid=15674 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043514.349:6375): pid=15669 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043514.349:6376): pid=15669 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043514.350:6377): pid=15669 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043514.350:6378): pid=15669 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043514.351:6379): pid=15669 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043514.351:6380): pid=15669 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043514.351:6381): pid=15669 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043514.351:6382): pid=15669 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15669 suid=0 rport=52880 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043514.724:6383): pid=15659 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-heat-engine-1:10.0.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043517.386:6384): pid=15716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043517.386:6385): pid=15716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043517.386:6386): pid=15716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043517.389:6387): pid=15714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15716 suid=74 rport=52886 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043517.389:6388): pid=15714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15716 suid=74 rport=52886 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043517.446:6389): pid=15714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52886 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043517.446:6390): pid=15714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52886 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043517.453:6391): pid=15714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043517.454:6392): pid=15714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15716 suid=74 rport=52886 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043517.455:6393): pid=15714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043517.455:6394): pid=15714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043517.455:6395): pid=15714 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=99 res=1 >type=SOFTWARE_UPDATE msg=audit(1538043517.466:6396): pid=15701 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-heat-api-cfn-1:10.0.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043517.628:6397): pid=15714 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043517.656:6398): pid=15714 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043517.699:6399): pid=15714 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043517.699:6400): pid=15714 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043517.701:6401): pid=15733 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043517.701:6402): pid=15733 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043517.701:6403): pid=15733 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043517.703:6404): pid=15733 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043517.726:6405): pid=15714 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043517.727:6406): pid=15714 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043517.727:6407): pid=15714 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043517.727:6408): pid=15714 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043517.727:6409): pid=15714 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043517.727:6410): pid=15714 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043517.727:6411): pid=15714 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043517.727:6412): pid=15714 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15714 suid=0 rport=52886 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043520.767:6413): pid=15767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043520.767:6414): pid=15767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043520.767:6415): pid=15767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15767 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043520.770:6416): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15767 suid=74 rport=52898 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043520.770:6417): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15767 suid=74 rport=52898 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043520.826:6418): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52898 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043520.826:6419): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52898 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043520.835:6420): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043520.835:6421): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15767 suid=74 rport=52898 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043520.837:6422): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043520.837:6423): pid=15766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043520.837:6424): pid=15766 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=100 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043521.006:6425): pid=15766 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043521.027:6426): pid=15766 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043521.071:6427): pid=15766 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043521.071:6428): pid=15766 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043521.074:6429): pid=15769 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043521.074:6430): pid=15769 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043521.074:6431): pid=15769 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043521.075:6432): pid=15769 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043521.096:6433): pid=15766 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043521.097:6434): pid=15766 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043521.097:6435): pid=15766 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043521.097:6436): pid=15766 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043521.097:6437): pid=15766 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043521.097:6438): pid=15766 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043521.097:6439): pid=15766 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043521.097:6440): pid=15766 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15766 suid=0 rport=52898 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043522.568:6441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043522.568:6442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043522.569:6443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043522.646:6444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043522.869:6445): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Error-1:0.17020-2.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043522.914:6446): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-numexpr-2.6.1-3.el7ost.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043522.986:6447): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="postgresql-libs-9.2.24-1.el7_5.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043523.023:6448): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-psycopg2-2.5.1-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043523.116:6449): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-sqlalchemy-utils-0.31.3-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043523.499:6450): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="hdf5-1.8.17-3.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043523.514:6451): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-sysv_ipc-0.7.0-4.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043523.531:6452): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-pytimeparse-1.1.5-1.1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043523.612:6453): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-trollius-2.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043523.788:6454): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-Bottleneck-0.6.0-5.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043523.800:6455): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-json-logger-0.1.7-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043523.823:6456): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-daiquiri-1.2.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043523.836:6457): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-TermReadKey-2.30-20.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043524.157:6458): pid=15784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15784 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043524.157:6459): pid=15784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15784 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043524.158:6460): pid=15784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15784 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043524.160:6461): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15784 suid=74 rport=52902 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043524.160:6462): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15784 suid=74 rport=52902 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043524.241:6463): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52902 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043524.242:6464): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52902 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043524.251:6465): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043524.252:6466): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15784 suid=74 rport=52902 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043524.254:6467): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043524.254:6468): pid=15783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043524.254:6469): pid=15783 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=101 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043524.422:6470): pid=15783 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043524.453:6471): pid=15783 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043524.497:6472): pid=15783 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043524.497:6473): pid=15783 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043524.500:6474): pid=15786 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043524.501:6475): pid=15786 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043524.501:6476): pid=15786 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043524.503:6477): pid=15786 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043524.534:6478): pid=15783 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043524.534:6479): pid=15783 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043524.535:6480): pid=15783 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043524.535:6481): pid=15783 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043524.535:6482): pid=15783 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043524.535:6483): pid=15783 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043524.535:6484): pid=15783 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043524.535:6485): pid=15783 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15783 suid=0 rport=52902 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043525.254:6486): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="git-1.8.3.1-19.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043525.268:6487): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-Git-1.8.3.1-19.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043525.292:6488): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-oslo-sphinx-4.18.1-0.20180223103803.3d19539.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043525.361:6489): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="blosc-1.11.1-3.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043525.740:6490): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-tables-3.3.0-4.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043527.584:6491): pid=15795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15795 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043527.585:6492): pid=15795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15795 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043527.585:6493): pid=15795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15795 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043527.588:6494): pid=15794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15795 suid=74 rport=52904 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043527.588:6495): pid=15794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15795 suid=74 rport=52904 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043527.686:6496): pid=15794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52904 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043527.686:6497): pid=15794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52904 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043527.695:6498): pid=15794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043527.695:6499): pid=15794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15795 suid=74 rport=52904 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043527.696:6500): pid=15794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043527.696:6501): pid=15794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043527.697:6502): pid=15794 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=102 res=1 >type=SERVICE_START msg=audit(1538043527.820:6503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043527.820:6504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043527.824:6505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043527.846:6506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538043527.849:6507): pid=15794 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043527.867:6508): pid=15794 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043527.910:6509): pid=15794 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043527.910:6510): pid=15794 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043527.912:6511): pid=15800 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043527.912:6512): pid=15800 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043527.912:6513): pid=15800 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043527.913:6514): pid=15800 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043527.941:6515): pid=15794 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043527.942:6516): pid=15794 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043527.942:6517): pid=15794 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043527.942:6518): pid=15794 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043527.943:6519): pid=15794 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043527.943:6520): pid=15794 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043527.943:6521): pid=15794 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043527.943:6522): pid=15794 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15794 suid=0 rport=52904 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043528.412:6523): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-pandas-0.19.1-3.el7ost.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043528.422:6524): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-setproctitle-1.1.9-5.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043528.452:6525): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-cotyledon-1.6.3-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043528.466:6526): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-ujson-1.35-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043528.488:6527): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-lz4-0.9.0-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043528.646:6528): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-gnocchi-4.2.5-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043528.682:6529): pid=15806 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=991 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043528.684:6530): pid=15806 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=991 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043528.696:6531): pid=15811 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=994 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043528.696:6532): pid=15811 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="nobody" acct="gnocchi" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043528.696:6533): pid=15811 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="gnocchi" acct="gnocchi" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043528.696:6534): pid=15811 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-to-shadow-group grp="nobody" acct="gnocchi" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043528.696:6535): pid=15811 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-to-shadow-group grp="gnocchi" acct="gnocchi" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043528.728:6536): pid=15746 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="gnocchi-common-4.2.5-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043530.997:6537): pid=15838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043530.997:6538): pid=15838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043530.997:6539): pid=15838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043531.000:6540): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15838 suid=74 rport=52908 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043531.000:6541): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15838 suid=74 rport=52908 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043531.078:6542): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52908 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043531.078:6543): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52908 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043531.087:6544): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043531.087:6545): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15838 suid=74 rport=52908 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043531.089:6546): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043531.089:6547): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043531.089:6548): pid=15837 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=103 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043531.248:6549): pid=15837 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043531.323:6550): pid=15825 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="gnocchi-api-4.2.5-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043531.349:6551): pid=15837 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043531.392:6552): pid=15837 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043531.392:6553): pid=15837 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043531.394:6554): pid=15857 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043531.394:6555): pid=15857 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043531.394:6556): pid=15857 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043531.395:6557): pid=15857 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043531.425:6558): pid=15837 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043531.426:6559): pid=15837 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043531.426:6560): pid=15837 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043531.426:6561): pid=15837 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043531.426:6562): pid=15837 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043531.426:6563): pid=15837 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043531.426:6564): pid=15837 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043531.426:6565): pid=15837 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15837 suid=0 rport=52908 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043533.061:6566): pid=15867 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="gnocchi-metricd-4.2.5-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043534.468:6567): pid=15910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043534.469:6568): pid=15910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043534.469:6569): pid=15910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043534.472:6570): pid=15909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15910 suid=74 rport=52912 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043534.472:6571): pid=15909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15910 suid=74 rport=52912 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043534.572:6572): pid=15909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52912 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043534.572:6573): pid=15909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52912 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043534.582:6574): pid=15909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043534.582:6575): pid=15909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15910 suid=74 rport=52912 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043534.584:6576): pid=15909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043534.584:6577): pid=15909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043534.584:6578): pid=15909 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=104 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043534.746:6579): pid=15909 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043534.764:6580): pid=15909 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043534.806:6581): pid=15909 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043534.806:6582): pid=15909 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043534.807:6583): pid=15913 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043534.807:6584): pid=15913 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043534.807:6585): pid=15913 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043534.807:6586): pid=15913 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043534.829:6587): pid=15909 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043534.829:6588): pid=15909 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043534.830:6589): pid=15909 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043534.830:6590): pid=15909 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043534.830:6591): pid=15909 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043534.830:6592): pid=15909 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043534.830:6593): pid=15909 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043534.830:6594): pid=15909 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15909 suid=0 rport=52912 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043535.233:6595): pid=15899 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="gnocchi-statsd-4.2.5-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043537.399:6596): pid=15941 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-gnocchiclient-7.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043537.871:6597): pid=15961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043537.872:6598): pid=15961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043537.872:6599): pid=15961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043537.874:6600): pid=15959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15961 suid=74 rport=52918 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043537.874:6601): pid=15959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15961 suid=74 rport=52918 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043537.974:6602): pid=15959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52918 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043537.974:6603): pid=15959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52918 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043537.982:6604): pid=15959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043537.983:6605): pid=15959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15961 suid=74 rport=52918 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043537.984:6606): pid=15959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043537.985:6607): pid=15959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043537.985:6608): pid=15959 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=105 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043538.149:6609): pid=15959 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043538.167:6610): pid=15959 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043538.209:6611): pid=15959 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043538.209:6612): pid=15959 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043538.211:6613): pid=15969 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043538.211:6614): pid=15969 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043538.211:6615): pid=15969 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043538.212:6616): pid=15969 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043538.240:6617): pid=15959 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043538.240:6618): pid=15959 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043538.241:6619): pid=15959 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043538.241:6620): pid=15959 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043538.241:6621): pid=15959 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043538.241:6622): pid=15959 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043538.241:6623): pid=15959 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043538.241:6624): pid=15959 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15959 suid=0 rport=52918 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043540.317:6625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043540.317:6626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043540.319:6627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043540.357:6628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043541.270:6629): pid=15985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043541.270:6630): pid=15985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043541.270:6631): pid=15985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043541.272:6632): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15985 suid=74 rport=52924 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043541.272:6633): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15985 suid=74 rport=52924 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043541.338:6634): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52924 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043541.338:6635): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52924 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043541.345:6636): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043541.345:6637): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15985 suid=74 rport=52924 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043541.346:6638): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043541.347:6639): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043541.347:6640): pid=15984 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=106 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043541.505:6641): pid=15984 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043541.526:6642): pid=15984 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043541.570:6643): pid=15984 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043541.570:6644): pid=15984 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043541.573:6645): pid=15987 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043541.573:6646): pid=15987 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043541.573:6647): pid=15987 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043541.574:6648): pid=15987 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043541.596:6649): pid=15984 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043541.596:6650): pid=15984 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043541.596:6651): pid=15984 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043541.597:6652): pid=15984 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043541.597:6653): pid=15984 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043541.597:6654): pid=15984 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043541.597:6655): pid=15984 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043541.597:6656): pid=15984 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15984 suid=0 rport=52924 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043544.638:6657): pid=15997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043544.639:6658): pid=15997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043544.639:6659): pid=15997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043544.642:6660): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15997 suid=74 rport=52926 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043544.642:6661): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=15997 suid=74 rport=52926 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043544.744:6662): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52926 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043544.744:6663): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52926 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043544.753:6664): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043544.754:6665): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15997 suid=74 rport=52926 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043544.756:6666): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043544.756:6667): pid=15996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043544.756:6668): pid=15996 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=107 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043544.912:6669): pid=15996 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043544.933:6670): pid=15996 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043544.978:6671): pid=15996 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043544.978:6672): pid=15996 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043544.982:6673): pid=15999 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043544.982:6674): pid=15999 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043544.982:6675): pid=15999 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043544.984:6676): pid=15999 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043545.007:6677): pid=15996 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043545.007:6678): pid=15996 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043545.008:6679): pid=15996 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043545.008:6680): pid=15996 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043545.008:6681): pid=15996 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=15996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043545.008:6682): pid=15996 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=15996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043545.008:6683): pid=15996 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=15996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043545.008:6684): pid=15996 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15996 suid=0 rport=52926 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043545.567:6685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043545.567:6686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043545.569:6687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043545.575:6688): pid=15960 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-jsonpath-rw-1.2.3-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043545.584:6689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043545.601:6690): pid=15960 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-jsonpath-rw-ext-1.0.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043546.081:6691): pid=15960 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-pysnmp-4.3.2-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043546.291:6692): pid=15960 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-ceilometer-1:10.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043546.313:6693): pid=15960 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-posix_ipc-0.9.8-6.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043546.344:6694): pid=16008 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=166 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043546.347:6695): pid=16008 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=166 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043546.358:6696): pid=16013 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=166 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043546.358:6697): pid=16013 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="nobody" acct="ceilometer" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043546.358:6698): pid=16013 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="ceilometer" acct="ceilometer" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043546.358:6699): pid=16013 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-to-shadow-group grp="nobody" acct="ceilometer" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043546.358:6700): pid=16013 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-to-shadow-group grp="ceilometer" acct="ceilometer" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043546.397:6701): pid=15960 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-ceilometer-common-1:10.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043548.049:6702): pid=16040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043548.049:6703): pid=16040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043548.049:6704): pid=16040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043548.051:6705): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16040 suid=74 rport=52930 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043548.051:6706): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16040 suid=74 rport=52930 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043548.118:6707): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52930 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043548.118:6708): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52930 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043548.124:6709): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043548.125:6710): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16040 suid=74 rport=52930 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043548.126:6711): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043548.126:6712): pid=16039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043548.127:6713): pid=16039 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=108 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043548.288:6714): pid=16039 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043548.302:6715): pid=16027 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-ceilometer-notification-1:10.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043548.311:6716): pid=16039 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043548.353:6717): pid=16039 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043548.353:6718): pid=16039 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043548.354:6719): pid=16059 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043548.354:6720): pid=16059 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043548.354:6721): pid=16059 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043548.355:6722): pid=16059 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043548.378:6723): pid=16039 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043548.378:6724): pid=16039 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043548.378:6725): pid=16039 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043548.378:6726): pid=16039 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043548.378:6727): pid=16039 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043548.378:6728): pid=16039 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043548.378:6729): pid=16039 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043548.378:6730): pid=16039 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16039 suid=0 rport=52930 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043551.362:6731): pid=16069 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="cyrus-sasl-gssapi-2.1.26-23.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043551.398:6732): pid=16069 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="yajl-2.0.4-4.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043551.407:6733): pid=16090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043551.407:6734): pid=16090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043551.407:6735): pid=16090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043551.409:6736): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16090 suid=74 rport=52940 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043551.409:6737): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16090 suid=74 rport=52940 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=ADD_GROUP msg=audit(1538043551.425:6738): pid=16092 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=76 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043551.428:6739): pid=16092 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=76 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043551.440:6740): pid=16097 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=993 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538043551.465:6741): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52940 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043551.465:6742): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52940 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043551.472:6743): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043551.473:6744): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16090 suid=74 rport=52940 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043551.474:6745): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043551.475:6746): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043551.475:6747): pid=16088 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=109 res=1 >type=SOFTWARE_UPDATE msg=audit(1538043551.560:6748): pid=16069 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="cyrus-sasl-2.1.26-23.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043551.591:6749): pid=16069 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="avahi-libs-0.6.31-19.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043551.631:6750): pid=16088 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043551.650:6751): pid=16088 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043551.691:6752): pid=16088 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043551.691:6753): pid=16088 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043551.693:6754): pid=16121 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043551.693:6755): pid=16121 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043551.693:6756): pid=16121 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043551.694:6757): pid=16121 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043551.711:6758): pid=16088 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043551.712:6759): pid=16088 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043551.712:6760): pid=16088 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043551.712:6761): pid=16088 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043551.712:6762): pid=16088 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043551.712:6763): pid=16088 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043551.712:6764): pid=16088 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16088 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043551.712:6765): pid=16088 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16088 suid=0 rport=52940 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043552.303:6766): pid=16069 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-libs-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043552.372:6767): pid=16069 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-python-4.5.0-1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043552.461:6768): pid=16069 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-ceilometer-polling-1:10.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043552.526:6769): pid=16069 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-ceilometer-central-1:10.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043554.753:6770): pid=16179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043554.753:6771): pid=16179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043554.753:6772): pid=16179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043554.755:6773): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16179 suid=74 rport=52944 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043554.756:6774): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16179 suid=74 rport=52944 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043554.812:6775): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52944 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043554.812:6776): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52944 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043554.818:6777): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=ADD_GROUP msg=audit(1538043554.818:6778): pid=16182 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=990 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043554.818:6779): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16179 suid=74 rport=52944 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=GRP_MGMT msg=audit(1538043554.820:6780): pid=16182 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=990 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538043554.821:6781): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043554.821:6782): pid=16178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043554.821:6783): pid=16178 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=110 res=1 >type=ADD_USER msg=audit(1538043554.832:6784): pid=16188 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=992 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043554.985:6785): pid=16178 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043555.003:6786): pid=16178 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043555.045:6787): pid=16178 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043555.045:6788): pid=16178 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043555.046:6789): pid=16210 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043555.046:6790): pid=16210 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043555.046:6791): pid=16210 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043555.046:6792): pid=16210 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043555.083:6793): pid=16178 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043555.083:6794): pid=16178 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043555.084:6795): pid=16178 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043555.084:6796): pid=16178 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043555.084:6797): pid=16178 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043555.084:6798): pid=16178 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043555.084:6799): pid=16178 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043555.084:6800): pid=16178 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16178 suid=0 rport=52944 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043555.171:6801): pid=16166 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="redis-3.2.8-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043557.332:6802): pid=16237 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-aodh-6.0.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043557.359:6803): pid=16250 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=989 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043557.362:6804): pid=16250 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=989 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043557.373:6805): pid=16255 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=991 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043557.373:6806): pid=16255 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="aodh" acct="aodh" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043557.373:6807): pid=16255 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-to-shadow-group grp="aodh" acct="aodh" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043557.410:6808): pid=16237 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-aodh-common-6.0.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043558.107:6809): pid=16277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043558.107:6810): pid=16277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043558.108:6811): pid=16277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16277 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043558.109:6812): pid=16276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16277 suid=74 rport=52950 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043558.109:6813): pid=16276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16277 suid=74 rport=52950 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043558.169:6814): pid=16276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52950 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043558.169:6815): pid=16276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52950 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043558.175:6816): pid=16276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043558.176:6817): pid=16276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16277 suid=74 rport=52950 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043558.177:6818): pid=16276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043558.177:6819): pid=16276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043558.177:6820): pid=16276 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=111 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043558.409:6821): pid=16276 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043558.427:6822): pid=16276 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043558.470:6823): pid=16276 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043558.470:6824): pid=16276 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043558.474:6825): pid=16279 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043558.474:6826): pid=16279 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043558.474:6827): pid=16279 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043558.476:6828): pid=16279 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043558.499:6829): pid=16276 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043558.499:6830): pid=16276 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043558.500:6831): pid=16276 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043558.500:6832): pid=16276 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043558.500:6833): pid=16276 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043558.501:6834): pid=16276 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043558.501:6835): pid=16276 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16276 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043558.501:6836): pid=16276 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16276 suid=0 rport=52950 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043559.457:6837): pid=16266 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-aodh-api-6.0.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043561.541:6838): pid=16321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043561.541:6839): pid=16321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043561.541:6840): pid=16321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043561.543:6841): pid=16320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16321 suid=74 rport=52956 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043561.543:6842): pid=16320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16321 suid=74 rport=52956 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043561.602:6843): pid=16320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52956 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043561.602:6844): pid=16320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52956 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043561.610:6845): pid=16320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043561.610:6846): pid=16320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16321 suid=74 rport=52956 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043561.612:6847): pid=16320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043561.613:6848): pid=16320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043561.613:6849): pid=16320 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=112 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043561.826:6850): pid=16320 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043561.927:6851): pid=16308 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-aodh-evaluator-6.0.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043561.947:6852): pid=16320 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043561.990:6853): pid=16320 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043561.990:6854): pid=16320 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043561.992:6855): pid=16340 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043561.992:6856): pid=16340 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043561.992:6857): pid=16340 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043561.993:6858): pid=16340 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043562.018:6859): pid=16320 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043562.019:6860): pid=16320 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043562.019:6861): pid=16320 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043562.019:6862): pid=16320 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043562.019:6863): pid=16320 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043562.019:6864): pid=16320 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043562.019:6865): pid=16320 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043562.020:6866): pid=16320 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16320 suid=0 rport=52956 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043563.930:6867): pid=16350 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-aodh-notifier-6.0.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043565.047:6868): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043565.047:6869): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043565.047:6870): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043565.049:6871): pid=16392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16393 suid=74 rport=52960 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043565.049:6872): pid=16392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16393 suid=74 rport=52960 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043565.106:6873): pid=16392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52960 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043565.106:6874): pid=16392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52960 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043565.114:6875): pid=16392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043565.115:6876): pid=16392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16393 suid=74 rport=52960 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043565.117:6877): pid=16392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043565.117:6878): pid=16392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043565.117:6879): pid=16392 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=113 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043565.286:6880): pid=16392 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043565.305:6881): pid=16392 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043565.348:6882): pid=16392 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043565.348:6883): pid=16392 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043565.350:6884): pid=16395 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043565.350:6885): pid=16395 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043565.350:6886): pid=16395 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043565.352:6887): pid=16395 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043565.374:6888): pid=16392 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043565.375:6889): pid=16392 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043565.375:6890): pid=16392 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043565.375:6891): pid=16392 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043565.375:6892): pid=16392 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16392 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043565.375:6893): pid=16392 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16392 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043565.375:6894): pid=16392 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16392 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043565.375:6895): pid=16392 uid=0 auid=0 ses=113 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16392 suid=0 rport=52960 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043565.702:6896): pid=16382 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-aodh-listener-6.0.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043568.415:6897): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16441 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043568.415:6898): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16441 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043568.415:6899): pid=16441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16441 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043568.417:6900): pid=16440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16441 suid=74 rport=52964 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043568.418:6901): pid=16440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16441 suid=74 rport=52964 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043568.476:6902): pid=16440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52964 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043568.476:6903): pid=16440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52964 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043568.482:6904): pid=16440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043568.483:6905): pid=16440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16441 suid=74 rport=52964 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043568.484:6906): pid=16440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043568.484:6907): pid=16440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043568.485:6908): pid=16440 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=114 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043568.654:6909): pid=16440 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043568.672:6910): pid=16440 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043568.714:6911): pid=16440 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043568.715:6912): pid=16440 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043568.717:6913): pid=16443 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16443 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043568.717:6914): pid=16443 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16443 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043568.717:6915): pid=16443 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16443 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043568.718:6916): pid=16443 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043568.739:6917): pid=16440 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043568.739:6918): pid=16440 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043568.740:6919): pid=16440 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043568.740:6920): pid=16440 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043568.740:6921): pid=16440 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043568.740:6922): pid=16440 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043568.740:6923): pid=16440 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043568.740:6924): pid=16440 uid=0 auid=0 ses=114 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16440 suid=0 rport=52964 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043570.817:6925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043570.817:6926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043570.819:6927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043570.860:6928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043571.776:6929): pid=16459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043571.776:6930): pid=16459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043571.776:6931): pid=16459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043571.778:6932): pid=16457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16459 suid=74 rport=52970 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043571.778:6933): pid=16457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16459 suid=74 rport=52970 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043571.835:6934): pid=16457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52970 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043571.835:6935): pid=16457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52970 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043571.842:6936): pid=16457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043571.843:6937): pid=16457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16459 suid=74 rport=52970 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043571.844:6938): pid=16457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043571.844:6939): pid=16457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043571.845:6940): pid=16457 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=115 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043571.996:6941): pid=16457 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043572.015:6942): pid=16457 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043572.058:6943): pid=16457 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043572.058:6944): pid=16457 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043572.060:6945): pid=16462 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16462 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043572.060:6946): pid=16462 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16462 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043572.060:6947): pid=16462 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16462 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043572.061:6948): pid=16462 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043572.084:6949): pid=16457 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043572.085:6950): pid=16457 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043572.085:6951): pid=16457 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043572.085:6952): pid=16457 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043572.085:6953): pid=16457 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043572.085:6954): pid=16457 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043572.085:6955): pid=16457 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043572.085:6956): pid=16457 uid=0 auid=0 ses=115 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16457 suid=0 rport=52970 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043575.113:6957): pid=16470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043575.114:6958): pid=16470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043575.114:6959): pid=16470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16470 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043575.116:6960): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16470 suid=74 rport=52974 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043575.116:6961): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16470 suid=74 rport=52974 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043575.177:6962): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52974 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043575.177:6963): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52974 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043575.183:6964): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043575.184:6965): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16470 suid=74 rport=52974 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043575.185:6966): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043575.185:6967): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043575.185:6968): pid=16469 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=116 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043575.343:6969): pid=16469 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043575.370:6970): pid=16469 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043575.413:6971): pid=16469 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043575.413:6972): pid=16469 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043575.414:6973): pid=16472 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043575.414:6974): pid=16472 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043575.414:6975): pid=16472 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16472 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043575.415:6976): pid=16472 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043575.435:6977): pid=16469 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043575.435:6978): pid=16469 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043575.435:6979): pid=16469 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043575.436:6980): pid=16469 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043575.436:6981): pid=16469 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16469 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043575.436:6982): pid=16469 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16469 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043575.436:6983): pid=16469 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16469 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043575.436:6984): pid=16469 uid=0 auid=0 ses=116 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16469 suid=0 rport=52974 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043575.710:6985): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="lksctp-tools-1.0.17-2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043575.885:6986): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-kernel-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043575.921:6987): pid=16479 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=988 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043575.924:6988): pid=16479 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=988 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043575.939:6989): pid=16484 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=990 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043576.068:6990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043576.068:6991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043576.070:6992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043576.083:6993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043576.344:6994): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-erts-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043576.478:6995): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-compiler-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043576.824:6996): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-hipe-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043576.869:6997): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-syntax_tools-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043577.121:6998): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-stdlib-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043577.141:6999): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-crypto-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043577.226:7000): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-mnesia-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043577.256:7001): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-runtime_tools-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043577.493:7002): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-snmp-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043577.579:7003): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-asn1-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043577.655:7004): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-public_key-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043577.776:7005): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-inets-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043577.964:7006): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-ssl-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043578.109:7007): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-tools-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043578.150:7008): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-sasl-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043578.170:7009): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-eldap-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043578.187:7010): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-otp_mibs-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043578.213:7011): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-os_mon-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043578.224:7012): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-sd_notify-1.0-2.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043578.341:7013): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="erlang-xmerl-18.3.4.8-1.el7ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043578.364:7014): pid=16494 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043578.367:7015): pid=16494 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043578.374:7016): pid=16499 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=989 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043578.477:7017): pid=16508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043578.477:7018): pid=16508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043578.477:7019): pid=16508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043578.479:7020): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16508 suid=74 rport=52976 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043578.479:7021): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16508 suid=74 rport=52976 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043578.536:7022): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52976 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043578.536:7023): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52976 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043578.543:7024): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043578.543:7025): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16508 suid=74 rport=52976 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043578.546:7026): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043578.546:7027): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043578.546:7028): pid=16507 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=117 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043578.709:7029): pid=16507 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043578.727:7030): pid=16507 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043578.769:7031): pid=16507 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043578.770:7032): pid=16507 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043578.771:7033): pid=16510 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043578.772:7034): pid=16510 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043578.772:7035): pid=16510 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043578.773:7036): pid=16510 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043578.795:7037): pid=16507 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043578.795:7038): pid=16507 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043578.796:7039): pid=16507 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043578.796:7040): pid=16507 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043578.796:7041): pid=16507 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043578.796:7042): pid=16507 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043578.796:7043): pid=16507 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043578.796:7044): pid=16507 uid=0 auid=0 ses=117 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16507 suid=0 rport=52976 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043579.002:7045): pid=16430 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rabbitmq-server-3.6.15-3.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043580.038:7046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=epmd@0.0.0.0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043581.856:7047): pid=16878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16878 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043581.856:7048): pid=16878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16878 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043581.856:7049): pid=16878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16878 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043581.858:7050): pid=16877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16878 suid=74 rport=52978 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043581.858:7051): pid=16877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=16878 suid=74 rport=52978 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043581.915:7052): pid=16877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52978 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043581.915:7053): pid=16877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52978 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043581.921:7054): pid=16877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043581.922:7055): pid=16877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16878 suid=74 rport=52978 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043581.923:7056): pid=16877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043581.923:7057): pid=16877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043581.924:7058): pid=16877 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=118 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043582.084:7059): pid=16877 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043582.117:7060): pid=16877 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043582.161:7061): pid=16877 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043582.161:7062): pid=16877 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043582.165:7063): pid=16886 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043582.165:7064): pid=16886 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043582.165:7065): pid=16886 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043582.166:7066): pid=16886 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043582.200:7067): pid=16877 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043582.200:7068): pid=16877 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043582.202:7069): pid=16877 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043582.202:7070): pid=16877 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043582.202:7071): pid=16877 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=16877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043582.202:7072): pid=16877 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=16877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043582.202:7073): pid=16877 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=16877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043582.202:7074): pid=16877 uid=0 auid=0 ses=118 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16877 suid=0 rport=52978 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043582.277:7075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rabbitmq-server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538043583.142:7076): table=filter family=2 entries=12 >type=SYSCALL msg=audit(1538043583.142:7076): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b85d60 items=0 ppid=12057 pid=16956 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043583.142:7076): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540032002D2D77616974002D740066696C746572002D73003137322E31362E312E31332F3332002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730033333036002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E >type=NETFILTER_CFG msg=audit(1538043583.451:7077): table=filter family=2 entries=13 >type=SYSCALL msg=audit(1538043583.451:7077): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=250d1b0 items=0 ppid=12057 pid=16993 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043583.451:7077): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540032002D2D77616974002D740066696C746572002D7000746370002D6D006D756C7469706F7274002D2D64706F72747300353030302C3335333537002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E7400303031206B657973746F >type=NETFILTER_CFG msg=audit(1538043583.651:7078): table=filter family=2 entries=14 >type=SYSCALL msg=audit(1538043583.651:7078): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=da8610 items=0 ppid=12057 pid=17027 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043583.651:7078): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540031002D2D77616974002D740066696C746572002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730039323932002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E740030303120676C616E636520696E636F6D >type=CRYPTO_KEY_USER msg=audit(1538043585.244:7079): pid=17061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043585.245:7080): pid=17061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043585.245:7081): pid=17061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043585.248:7082): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17061 suid=74 rport=52980 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043585.248:7083): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17061 suid=74 rport=52980 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043585.336:7084): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52980 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043585.336:7085): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52980 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043585.343:7086): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043585.344:7087): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17061 suid=74 rport=52980 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043585.345:7088): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043585.345:7089): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043585.346:7090): pid=17060 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=119 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043585.512:7091): pid=17060 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043585.531:7092): pid=17060 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043585.573:7093): pid=17060 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043585.573:7094): pid=17060 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043585.575:7095): pid=17063 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043585.575:7096): pid=17063 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043585.575:7097): pid=17063 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043585.576:7098): pid=17063 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043585.604:7099): pid=17060 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043585.604:7100): pid=17060 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043585.605:7101): pid=17060 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043585.605:7102): pid=17060 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043585.605:7103): pid=17060 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043585.605:7104): pid=17060 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043585.605:7105): pid=17060 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17060 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043585.606:7106): pid=17060 uid=0 auid=0 ses=119 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17060 suid=0 rport=52980 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043587.568:7107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043587.568:7108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043587.570:7109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043587.583:7110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043588.651:7111): pid=17076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043588.651:7112): pid=17076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043588.651:7113): pid=17076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043588.653:7114): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17076 suid=74 rport=52982 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043588.653:7115): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17076 suid=74 rport=52982 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043588.752:7116): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52982 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043588.752:7117): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52982 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043588.761:7118): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043588.762:7119): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17076 suid=74 rport=52982 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043588.763:7120): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043588.764:7121): pid=17075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043588.764:7122): pid=17075 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=120 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043588.923:7123): pid=17075 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043588.940:7124): pid=17075 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043588.983:7125): pid=17075 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043588.983:7126): pid=17075 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043588.985:7127): pid=17079 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043588.986:7128): pid=17079 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043588.986:7129): pid=17079 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043588.988:7130): pid=17079 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043589.013:7131): pid=17075 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043589.013:7132): pid=17075 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043589.014:7133): pid=17075 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043589.014:7134): pid=17075 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043589.014:7135): pid=17075 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043589.014:7136): pid=17075 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043589.014:7137): pid=17075 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043589.014:7138): pid=17075 uid=0 auid=0 ses=120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17075 suid=0 rport=52982 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538043590.111:7139): table=filter family=2 entries=15 >type=SYSCALL msg=audit(1538043590.111:7139): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=205ca60 items=0 ppid=12057 pid=17108 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043590.111:7139): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540031002D2D77616974002D740066696C746572002D73003137322E31362E312E31332F3332002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730033323630002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E >type=NETFILTER_CFG msg=audit(1538043590.272:7140): table=filter family=2 entries=16 >type=SYSCALL msg=audit(1538043590.272:7140): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=159eec0 items=0 ppid=12057 pid=17143 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043590.272:7140): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540032002D2D77616974002D740066696C746572002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730038373736002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E74003030312063696E6465722D6170692069 >type=CRYPTO_KEY_USER msg=audit(1538043592.057:7141): pid=17189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043592.057:7142): pid=17189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043592.057:7143): pid=17189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043592.060:7144): pid=17188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17189 suid=74 rport=52984 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043592.060:7145): pid=17188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17189 suid=74 rport=52984 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043592.153:7146): pid=17188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043592.153:7147): pid=17188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043592.160:7148): pid=17188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043592.161:7149): pid=17188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17189 suid=74 rport=52984 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043592.163:7150): pid=17188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043592.163:7151): pid=17188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043592.163:7152): pid=17188 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=121 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043592.322:7153): pid=17188 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043592.341:7154): pid=17188 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043592.383:7155): pid=17188 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043592.383:7156): pid=17188 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043592.384:7157): pid=17200 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043592.384:7158): pid=17200 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043592.384:7159): pid=17200 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17200 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043592.385:7160): pid=17200 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043592.411:7161): pid=17188 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043592.411:7162): pid=17188 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043592.412:7163): pid=17188 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043592.412:7164): pid=17188 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043592.412:7165): pid=17188 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043592.412:7166): pid=17188 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043592.412:7167): pid=17188 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043592.412:7168): pid=17188 uid=0 auid=0 ses=121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17188 suid=0 rport=52984 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043592.817:7169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043592.817:7170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043592.819:7171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043592.834:7172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043594.362:7173): pid=17177 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-urwid-1.1.1-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043594.403:7174): pid=17177 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-configshell-1:1.1.fb23-5.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043594.431:7175): pid=17177 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="targetcli-2.1.fb47-0.1.20170815.git5bf3517.el7cp.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043595.449:7176): pid=17213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043595.449:7177): pid=17213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043595.449:7178): pid=17213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043595.451:7179): pid=17212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17213 suid=74 rport=52992 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043595.451:7180): pid=17212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17213 suid=74 rport=52992 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043595.507:7181): pid=17212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52992 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043595.507:7182): pid=17212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52992 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043595.512:7183): pid=17212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043595.513:7184): pid=17212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17213 suid=74 rport=52992 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043595.514:7185): pid=17212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043595.514:7186): pid=17212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043595.515:7187): pid=17212 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=122 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043595.676:7188): pid=17212 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043595.697:7189): pid=17212 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043595.739:7190): pid=17212 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043595.739:7191): pid=17212 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043595.741:7192): pid=17215 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17215 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043595.741:7193): pid=17215 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17215 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043595.741:7194): pid=17215 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17215 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043595.742:7195): pid=17215 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043595.767:7196): pid=17212 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043595.767:7197): pid=17212 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043595.767:7198): pid=17212 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043595.767:7199): pid=17212 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043595.767:7200): pid=17212 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043595.768:7201): pid=17212 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043595.768:7202): pid=17212 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043595.768:7203): pid=17212 uid=0 auid=0 ses=122 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17212 suid=0 rport=52992 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043597.872:7204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043597.872:7205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043597.874:7206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043597.890:7207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538043598.245:7208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-losetup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043598.812:7209): pid=17351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043598.812:7210): pid=17351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043598.812:7211): pid=17351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043598.815:7212): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17351 suid=74 rport=52994 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043598.815:7213): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17351 suid=74 rport=52994 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043598.875:7214): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52994 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043598.875:7215): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52994 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043598.882:7216): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043598.884:7217): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17351 suid=74 rport=52994 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043598.885:7218): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043598.886:7219): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043598.886:7220): pid=17350 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=123 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043599.117:7221): pid=17350 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043599.147:7222): pid=17350 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043599.190:7223): pid=17350 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043599.190:7224): pid=17350 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043599.193:7225): pid=17353 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043599.193:7226): pid=17353 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043599.193:7227): pid=17353 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043599.195:7228): pid=17353 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043599.224:7229): pid=17350 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043599.224:7230): pid=17350 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043599.224:7231): pid=17350 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043599.224:7232): pid=17350 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043599.224:7233): pid=17350 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043599.224:7234): pid=17350 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043599.225:7235): pid=17350 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043599.225:7236): pid=17350 uid=0 auid=0 ses=123 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17350 suid=0 rport=52994 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043602.283:7237): pid=17366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17366 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043602.283:7238): pid=17366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17366 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043602.283:7239): pid=17366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17366 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043602.285:7240): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17366 suid=74 rport=52996 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043602.285:7241): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17366 suid=74 rport=52996 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043602.343:7242): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52996 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043602.343:7243): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52996 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043602.351:7244): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043602.352:7245): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17366 suid=74 rport=52996 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043602.353:7246): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043602.353:7247): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043602.353:7248): pid=17365 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=124 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043602.523:7249): pid=17365 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043602.545:7250): pid=17365 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043602.588:7251): pid=17365 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043602.588:7252): pid=17365 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043602.591:7253): pid=17368 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043602.591:7254): pid=17368 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043602.591:7255): pid=17368 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043602.592:7256): pid=17368 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043602.615:7257): pid=17365 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043602.615:7258): pid=17365 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043602.615:7259): pid=17365 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043602.615:7260): pid=17365 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043602.615:7261): pid=17365 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043602.616:7262): pid=17365 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043602.616:7263): pid=17365 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17365 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043602.616:7264): pid=17365 uid=0 auid=0 ses=124 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17365 suid=0 rport=52996 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043603.567:7265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043603.567:7266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043603.569:7267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043603.611:7268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538043604.257:7269): table=filter family=2 entries=17 >type=SYSCALL msg=audit(1538043604.257:7269): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2031310 items=0 ppid=12057 pid=17386 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043604.257:7269): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540037002D2D77616974002D740066696C746572002D7000746370002D6D006D756C7469706F7274002D2D64706F72747300383737332C383737342C383737352C38373738002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E740030 >type=CRYPTO_KEY_USER msg=audit(1538043605.656:7270): pid=17432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043605.657:7271): pid=17432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043605.657:7272): pid=17432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043605.659:7273): pid=17431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17432 suid=74 rport=52998 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043605.659:7274): pid=17431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17432 suid=74 rport=52998 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043605.716:7275): pid=17431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=52998 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043605.716:7276): pid=17431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=52998 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043605.723:7277): pid=17431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043605.724:7278): pid=17431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17432 suid=74 rport=52998 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043605.726:7279): pid=17431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043605.726:7280): pid=17431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043605.726:7281): pid=17431 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=125 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043605.886:7282): pid=17431 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043605.912:7283): pid=17431 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043605.955:7284): pid=17431 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043605.955:7285): pid=17431 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043605.958:7286): pid=17435 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043605.958:7287): pid=17435 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043605.958:7288): pid=17435 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043605.960:7289): pid=17435 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043605.984:7290): pid=17431 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043605.984:7291): pid=17431 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043605.985:7292): pid=17431 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043605.985:7293): pid=17431 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043605.985:7294): pid=17431 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043605.985:7295): pid=17431 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043605.985:7296): pid=17431 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043605.985:7297): pid=17431 uid=0 auid=0 ses=125 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17431 suid=0 rport=52998 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043607.108:7298): pid=17420 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-os-vif-1.9.1-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043607.126:7299): pid=17420 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-microversion-parse-0.1.4-2.1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043607.161:7300): pid=17420 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-os-traits-0.5.0-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043608.818:7301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043608.818:7302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043608.820:7303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043608.832:7304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043609.034:7305): pid=17452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043609.034:7306): pid=17452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043609.034:7307): pid=17452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043609.035:7308): pid=17451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17452 suid=74 rport=53004 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043609.036:7309): pid=17451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17452 suid=74 rport=53004 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043609.094:7310): pid=17451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53004 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043609.094:7311): pid=17451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53004 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043609.103:7312): pid=17451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043609.104:7313): pid=17451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17452 suid=74 rport=53004 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043609.106:7314): pid=17451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043609.106:7315): pid=17451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043609.106:7316): pid=17451 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=126 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043609.264:7317): pid=17451 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043609.291:7318): pid=17451 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043609.335:7319): pid=17451 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043609.335:7320): pid=17451 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043609.338:7321): pid=17454 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043609.338:7322): pid=17454 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043609.338:7323): pid=17454 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043609.340:7324): pid=17454 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043609.364:7325): pid=17451 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043609.364:7326): pid=17451 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043609.364:7327): pid=17451 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043609.364:7328): pid=17451 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043609.364:7329): pid=17451 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043609.364:7330): pid=17451 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043609.364:7331): pid=17451 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043609.365:7332): pid=17451 uid=0 auid=0 ses=126 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17451 suid=0 rport=53004 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043609.862:7333): pid=17420 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-nova-1:17.0.5-3.d7864fbgit.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538043609.901:7334): pid=17461 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=162 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538043609.903:7335): pid=17461 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=162 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538043609.916:7336): pid=17466 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=162 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043609.916:7337): pid=17466 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="nobody" acct="nova" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043609.916:7338): pid=17466 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="nova" acct="nova" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043609.916:7339): pid=17466 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-to-shadow-group grp="nobody" acct="nova" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538043609.916:7340): pid=17466 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-to-shadow-group grp="nova" acct="nova" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043610.078:7341): pid=17420 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-nova-common-1:17.0.5-3.d7864fbgit.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043610.192:7342): pid=17420 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-nova-api-1:17.0.5-3.d7864fbgit.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043612.406:7343): pid=17508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043612.407:7344): pid=17508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043612.407:7345): pid=17508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043612.410:7346): pid=17507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17508 suid=74 rport=53006 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043612.410:7347): pid=17507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17508 suid=74 rport=53006 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043612.470:7348): pid=17507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53006 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043612.470:7349): pid=17507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53006 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043612.478:7350): pid=17507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043612.479:7351): pid=17507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17508 suid=74 rport=53006 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043612.483:7352): pid=17507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043612.483:7353): pid=17507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043612.483:7354): pid=17507 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=127 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043612.648:7355): pid=17507 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043612.674:7356): pid=17507 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043612.716:7357): pid=17507 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043612.716:7358): pid=17507 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043612.717:7359): pid=17513 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043612.717:7360): pid=17513 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043612.717:7361): pid=17513 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043612.718:7362): pid=17513 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043612.741:7363): pid=17507 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043612.741:7364): pid=17507 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043612.742:7365): pid=17507 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043612.742:7366): pid=17507 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043612.742:7367): pid=17507 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043612.742:7368): pid=17507 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043612.742:7369): pid=17507 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043612.742:7370): pid=17507 uid=0 auid=0 ses=127 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17507 suid=0 rport=53006 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043612.776:7371): pid=17494 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-nova-placement-api-1:17.0.5-3.d7864fbgit.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043615.318:7372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043615.318:7373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043615.320:7374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043615.402:7375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043615.779:7376): pid=17530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043615.779:7377): pid=17530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043615.779:7378): pid=17530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043615.781:7379): pid=17529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17530 suid=74 rport=53010 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043615.781:7380): pid=17529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17530 suid=74 rport=53010 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043615.839:7381): pid=17529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53010 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043615.839:7382): pid=17529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53010 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043615.846:7383): pid=17529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043615.846:7384): pid=17529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17530 suid=74 rport=53010 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043615.848:7385): pid=17529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043615.848:7386): pid=17529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043615.848:7387): pid=17529 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=128 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043616.016:7388): pid=17529 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043616.040:7389): pid=17529 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043616.084:7390): pid=17529 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043616.084:7391): pid=17529 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043616.087:7392): pid=17532 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043616.087:7393): pid=17532 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043616.087:7394): pid=17532 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043616.088:7395): pid=17532 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043616.113:7396): pid=17529 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043616.113:7397): pid=17529 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043616.114:7398): pid=17529 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043616.114:7399): pid=17529 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043616.114:7400): pid=17529 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043616.114:7401): pid=17529 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043616.114:7402): pid=17529 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043616.114:7403): pid=17529 uid=0 auid=0 ses=128 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17529 suid=0 rport=53010 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043619.160:7404): pid=17555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043619.160:7405): pid=17555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043619.160:7406): pid=17555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043619.163:7407): pid=17551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17555 suid=74 rport=53012 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043619.163:7408): pid=17551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17555 suid=74 rport=53012 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043619.220:7409): pid=17551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53012 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043619.220:7410): pid=17551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53012 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043619.229:7411): pid=17551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043619.230:7412): pid=17551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17555 suid=74 rport=53012 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043619.231:7413): pid=17551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043619.231:7414): pid=17551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043619.231:7415): pid=17551 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=129 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043619.405:7416): pid=17551 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043619.428:7417): pid=17551 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043619.471:7418): pid=17551 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043619.471:7419): pid=17551 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043619.473:7420): pid=17561 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043619.473:7421): pid=17561 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043619.473:7422): pid=17561 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043619.474:7423): pid=17561 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043619.500:7424): pid=17551 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043619.500:7425): pid=17551 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043619.501:7426): pid=17551 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043619.501:7427): pid=17551 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043619.502:7428): pid=17551 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043619.502:7429): pid=17551 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043619.502:7430): pid=17551 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043619.502:7431): pid=17551 uid=0 auid=0 ses=129 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17551 suid=0 rport=53012 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043620.488:7432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043620.488:7433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043620.490:7434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043620.604:7435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538043620.620:7436): pid=17552 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-nova-conductor-1:17.0.5-3.d7864fbgit.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043622.544:7437): pid=17609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043622.544:7438): pid=17609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043622.544:7439): pid=17609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043622.546:7440): pid=17608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17609 suid=74 rport=53016 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043622.546:7441): pid=17608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17609 suid=74 rport=53016 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043622.605:7442): pid=17608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53016 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043622.605:7443): pid=17608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53016 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043622.613:7444): pid=17608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043622.613:7445): pid=17608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17609 suid=74 rport=53016 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043622.615:7446): pid=17608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043622.615:7447): pid=17608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043622.615:7448): pid=17608 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=130 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043622.795:7449): pid=17608 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043622.817:7450): pid=17608 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043622.859:7451): pid=17608 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043622.859:7452): pid=17608 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043622.860:7453): pid=17615 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043622.860:7454): pid=17615 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043622.860:7455): pid=17615 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043622.861:7456): pid=17615 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043622.990:7457): pid=17594 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-nova-scheduler-1:17.0.5-3.d7864fbgit.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043623.002:7458): pid=17608 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043623.002:7459): pid=17608 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043623.003:7460): pid=17608 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043623.003:7461): pid=17608 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043623.004:7462): pid=17608 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043623.004:7463): pid=17608 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043623.004:7464): pid=17608 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043623.004:7465): pid=17608 uid=0 auid=0 ses=130 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17608 suid=0 rport=53016 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043625.516:7466): pid=17640 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-websockify-0.8.0-1.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043625.565:7467): pid=17640 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="novnc-0.6.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043625.642:7468): pid=17640 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-nova-novncproxy-1:17.0.5-3.d7864fbgit.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043625.927:7469): pid=17680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043625.928:7470): pid=17680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043625.928:7471): pid=17680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043625.930:7472): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17680 suid=74 rport=53024 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043625.930:7473): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17680 suid=74 rport=53024 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043625.988:7474): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53024 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043625.988:7475): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53024 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043625.995:7476): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043625.996:7477): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17680 suid=74 rport=53024 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043625.999:7478): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043625.999:7479): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043625.999:7480): pid=17679 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=131 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043626.237:7481): pid=17679 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043626.268:7482): pid=17679 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043626.311:7483): pid=17679 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043626.311:7484): pid=17679 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043626.313:7485): pid=17685 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043626.313:7486): pid=17685 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043626.313:7487): pid=17685 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043626.314:7488): pid=17685 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043626.344:7489): pid=17679 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043626.344:7490): pid=17679 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043626.345:7491): pid=17679 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043626.345:7492): pid=17679 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043626.346:7493): pid=17679 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043626.346:7494): pid=17679 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043626.346:7495): pid=17679 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043626.346:7496): pid=17679 uid=0 auid=0 ses=131 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17679 suid=0 rport=53024 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043629.374:7497): pid=17702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043629.375:7498): pid=17702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043629.375:7499): pid=17702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17702 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043629.378:7500): pid=17701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17702 suid=74 rport=53028 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043629.378:7501): pid=17701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17702 suid=74 rport=53028 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043629.444:7502): pid=17701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53028 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043629.444:7503): pid=17701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53028 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043629.452:7504): pid=17701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043629.452:7505): pid=17701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17702 suid=74 rport=53028 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043629.453:7506): pid=17701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043629.453:7507): pid=17701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043629.454:7508): pid=17701 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=132 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043629.617:7509): pid=17701 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043629.625:7510): pid=17681 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-nova-console-1:17.0.5-3.d7864fbgit.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043629.642:7511): pid=17701 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043629.684:7512): pid=17701 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043629.684:7513): pid=17701 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043629.685:7514): pid=17721 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043629.685:7515): pid=17721 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043629.685:7516): pid=17721 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043629.686:7517): pid=17721 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043629.705:7518): pid=17701 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043629.705:7519): pid=17701 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043629.705:7520): pid=17701 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043629.705:7521): pid=17701 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043629.705:7522): pid=17701 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043629.706:7523): pid=17701 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043629.706:7524): pid=17701 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043629.706:7525): pid=17701 uid=0 auid=0 ses=132 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17701 suid=0 rport=53028 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538043631.525:7526): table=filter family=2 entries=18 >type=SYSCALL msg=audit(1538043631.525:7526): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1c9f770 items=0 ppid=12057 pid=17732 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043631.525:7526): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540037002D2D77616974002D740066696C746572002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730039363936002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E7400303031206E657574726F6E2073657276 >type=CRYPTO_KEY_USER msg=audit(1538043632.735:7527): pid=17779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043632.735:7528): pid=17779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043632.735:7529): pid=17779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043632.737:7530): pid=17778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17779 suid=74 rport=53030 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043632.738:7531): pid=17778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17779 suid=74 rport=53030 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043632.794:7532): pid=17778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53030 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043632.794:7533): pid=17778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53030 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043632.801:7534): pid=17778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043632.802:7535): pid=17778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17779 suid=74 rport=53030 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043632.803:7536): pid=17778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043632.803:7537): pid=17778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043632.803:7538): pid=17778 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=133 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043632.967:7539): pid=17778 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043632.997:7540): pid=17778 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043633.040:7541): pid=17778 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043633.040:7542): pid=17778 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043633.041:7543): pid=17785 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043633.041:7544): pid=17785 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043633.042:7545): pid=17785 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043633.042:7546): pid=17785 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043633.070:7547): pid=17778 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043633.071:7548): pid=17778 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043633.071:7549): pid=17778 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043633.071:7550): pid=17778 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043633.071:7551): pid=17778 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17778 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043633.071:7552): pid=17778 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17778 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043633.072:7553): pid=17778 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17778 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043633.072:7554): pid=17778 uid=0 auid=0 ses=133 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17778 suid=0 rport=53030 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043634.818:7555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043634.818:7556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043634.819:7557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043634.860:7558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043636.106:7559): pid=17814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043636.106:7560): pid=17814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043636.106:7561): pid=17814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043636.109:7562): pid=17813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17814 suid=74 rport=53032 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043636.109:7563): pid=17813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17814 suid=74 rport=53032 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043636.178:7564): pid=17813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53032 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043636.178:7565): pid=17813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53032 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043636.188:7566): pid=17813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043636.189:7567): pid=17813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17814 suid=74 rport=53032 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043636.191:7568): pid=17813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043636.191:7569): pid=17813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043636.192:7570): pid=17813 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=134 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043636.353:7571): pid=17813 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043636.382:7572): pid=17813 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043636.426:7573): pid=17813 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043636.426:7574): pid=17813 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043636.428:7575): pid=17820 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043636.428:7576): pid=17820 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043636.428:7577): pid=17820 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043636.430:7578): pid=17820 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043636.458:7579): pid=17813 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043636.458:7580): pid=17813 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043636.459:7581): pid=17813 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043636.459:7582): pid=17813 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043636.459:7583): pid=17813 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043636.460:7584): pid=17813 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043636.460:7585): pid=17813 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043636.460:7586): pid=17813 uid=0 auid=0 ses=134 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17813 suid=0 rport=53032 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043639.498:7587): pid=17849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043639.498:7588): pid=17849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043639.498:7589): pid=17849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043639.501:7590): pid=17848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17849 suid=74 rport=53034 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043639.501:7591): pid=17848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17849 suid=74 rport=53034 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043639.565:7592): pid=17848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53034 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043639.565:7593): pid=17848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53034 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043639.572:7594): pid=17848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043639.572:7595): pid=17848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17849 suid=74 rport=53034 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043639.573:7596): pid=17848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043639.574:7597): pid=17848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043639.574:7598): pid=17848 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=135 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043639.726:7599): pid=17848 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043639.746:7600): pid=17848 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043639.789:7601): pid=17848 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043639.789:7602): pid=17848 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043639.793:7603): pid=17851 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17851 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043639.793:7604): pid=17851 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17851 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043639.793:7605): pid=17851 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17851 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043639.794:7606): pid=17851 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043639.819:7607): pid=17848 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043639.820:7608): pid=17848 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043639.821:7609): pid=17848 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043639.821:7610): pid=17848 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043639.821:7611): pid=17848 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043639.821:7612): pid=17848 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043639.821:7613): pid=17848 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043639.822:7614): pid=17848 uid=0 auid=0 ses=135 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17848 suid=0 rport=53034 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043640.068:7615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043640.068:7616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043640.070:7617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043640.081:7618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043642.871:7619): pid=17897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043642.871:7620): pid=17897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043642.871:7621): pid=17897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043642.873:7622): pid=17896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17897 suid=74 rport=53036 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043642.873:7623): pid=17896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17897 suid=74 rport=53036 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043642.932:7624): pid=17896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53036 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043642.932:7625): pid=17896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53036 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043642.940:7626): pid=17896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043642.941:7627): pid=17896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17897 suid=74 rport=53036 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043642.942:7628): pid=17896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043642.943:7629): pid=17896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043642.943:7630): pid=17896 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=136 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043643.104:7631): pid=17896 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043643.133:7632): pid=17896 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043643.175:7633): pid=17896 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043643.175:7634): pid=17896 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043643.178:7635): pid=17900 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043643.178:7636): pid=17900 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043643.178:7637): pid=17900 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043643.180:7638): pid=17900 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043643.217:7639): pid=17896 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043643.217:7640): pid=17896 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043643.218:7641): pid=17896 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043643.218:7642): pid=17896 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043643.218:7643): pid=17896 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043643.218:7644): pid=17896 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043643.218:7645): pid=17896 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043643.218:7646): pid=17896 uid=0 auid=0 ses=136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17896 suid=0 rport=53036 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043645.317:7647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043645.317:7648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043645.319:7649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043645.330:7650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043646.253:7651): pid=17913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043646.253:7652): pid=17913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043646.253:7653): pid=17913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043646.255:7654): pid=17912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17913 suid=74 rport=53038 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043646.255:7655): pid=17912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17913 suid=74 rport=53038 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043646.311:7656): pid=17912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53038 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043646.311:7657): pid=17912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53038 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043646.319:7658): pid=17912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043646.319:7659): pid=17912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17913 suid=74 rport=53038 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043646.322:7660): pid=17912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043646.323:7661): pid=17912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043646.323:7662): pid=17912 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=137 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043646.553:7663): pid=17912 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043646.573:7664): pid=17912 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043646.615:7665): pid=17912 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043646.615:7666): pid=17912 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043646.617:7667): pid=17916 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043646.617:7668): pid=17916 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043646.617:7669): pid=17916 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043646.618:7670): pid=17916 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043646.650:7671): pid=17912 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043646.650:7672): pid=17912 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043646.650:7673): pid=17912 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043646.651:7674): pid=17912 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043646.651:7675): pid=17912 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17912 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043646.651:7676): pid=17912 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17912 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043646.651:7677): pid=17912 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17912 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043646.651:7678): pid=17912 uid=0 auid=0 ses=137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17912 suid=0 rport=53038 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043649.695:7679): pid=17926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17926 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043649.695:7680): pid=17926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17926 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043649.695:7681): pid=17926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17926 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043649.697:7682): pid=17925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17926 suid=74 rport=53040 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043649.697:7683): pid=17925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=17926 suid=74 rport=53040 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043649.755:7684): pid=17925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53040 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043649.755:7685): pid=17925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53040 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043649.764:7686): pid=17925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043649.765:7687): pid=17925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17926 suid=74 rport=53040 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043649.767:7688): pid=17925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043649.767:7689): pid=17925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043649.768:7690): pid=17925 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=138 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043649.995:7691): pid=17925 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043650.017:7692): pid=17925 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043650.060:7693): pid=17925 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043650.060:7694): pid=17925 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043650.063:7695): pid=17929 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17929 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043650.064:7696): pid=17929 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17929 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043650.064:7697): pid=17929 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17929 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043650.066:7698): pid=17929 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043650.096:7699): pid=17925 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043650.096:7700): pid=17925 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043650.097:7701): pid=17925 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043650.097:7702): pid=17925 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043650.097:7703): pid=17925 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=17925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043650.097:7704): pid=17925 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=17925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043650.097:7705): pid=17925 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=17925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043650.098:7706): pid=17925 uid=0 auid=0 ses=138 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17925 suid=0 rport=53040 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043650.567:7707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043650.567:7708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043650.569:7709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043650.583:7710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538043650.974:7711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=xinetd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538043651.154:7712): table=filter family=2 entries=19 >type=SYSCALL msg=audit(1538043651.154:7712): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=23cfbc0 items=0 ppid=12057 pid=17974 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043651.154:7712): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E505554003130002D2D77616974002D740066696C746572002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730038303830002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E74003030312073776966742070726F7879 >type=NETFILTER_CFG msg=audit(1538043651.812:7713): table=filter family=2 entries=20 >type=SYSCALL msg=audit(1538043651.812:7713): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1ddf020 items=0 ppid=12057 pid=18008 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043651.812:7713): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E505554003131002D2D77616974002D740066696C746572002D73003137322E31362E312E31332F3332002D7000746370002D6D006D756C7469706F7274002D2D64706F72747300363030302C363030312C363030322C383733002D6A00414343455054002D6D0063 >type=CRYPTO_KEY_USER msg=audit(1538043653.136:7714): pid=18043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043653.137:7715): pid=18043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043653.137:7716): pid=18043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043653.139:7717): pid=18042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18043 suid=74 rport=53044 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043653.139:7718): pid=18042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18043 suid=74 rport=53044 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043653.198:7719): pid=18042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53044 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043653.198:7720): pid=18042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53044 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043653.206:7721): pid=18042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043653.207:7722): pid=18042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18043 suid=74 rport=53044 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043653.208:7723): pid=18042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043653.208:7724): pid=18042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043653.208:7725): pid=18042 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=139 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043653.374:7726): pid=18042 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043653.392:7727): pid=18042 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043653.434:7728): pid=18042 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043653.434:7729): pid=18042 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043653.435:7730): pid=18046 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043653.435:7731): pid=18046 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043653.435:7732): pid=18046 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043653.436:7733): pid=18046 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043653.470:7734): pid=18042 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043653.470:7735): pid=18042 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043653.471:7736): pid=18042 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043653.471:7737): pid=18042 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043653.471:7738): pid=18042 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043653.471:7739): pid=18042 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043653.471:7740): pid=18042 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043653.471:7741): pid=18042 uid=0 auid=0 ses=139 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18042 suid=0 rport=53044 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538043655.575:7742): table=filter family=2 entries=21 >type=SYSCALL msg=audit(1538043655.575:7742): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=cc7470 items=0 ppid=12057 pid=18057 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043655.575:7742): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540034002D2D77616974002D740066696C746572002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730038303034002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E7400303031206865617420696E636F6D696E >type=SERVICE_START msg=audit(1538043656.068:7743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043656.068:7744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043656.069:7745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043656.082:7746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538043656.337:7747): table=filter family=2 entries=22 >type=SYSCALL msg=audit(1538043656.337:7747): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ff48d0 items=0 ppid=12057 pid=18098 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043656.337:7747): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540034002D2D77616974002D740066696C746572002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730038303030002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E740030303120686561742063666E20696E63 >type=CRYPTO_KEY_USER msg=audit(1538043656.507:7748): pid=18136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043656.508:7749): pid=18136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043656.508:7750): pid=18136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18136 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043656.511:7751): pid=18132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18136 suid=74 rport=53046 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043656.511:7752): pid=18132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18136 suid=74 rport=53046 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043656.568:7753): pid=18132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53046 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043656.568:7754): pid=18132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53046 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043656.575:7755): pid=18132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043656.575:7756): pid=18132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18136 suid=74 rport=53046 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043656.578:7757): pid=18132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043656.578:7758): pid=18132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043656.578:7759): pid=18132 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=140 res=1 >type=NETFILTER_CFG msg=audit(1538043656.583:7760): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538043656.583:7760): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f1bd20 items=0 ppid=12057 pid=18138 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043656.583:7760): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540034002D2D77616974002D740066696C746572002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730038303431002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E740030303120676E6F636368692D61706920 >type=USER_ROLE_CHANGE msg=audit(1538043656.743:7761): pid=18132 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043656.762:7762): pid=18132 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043656.806:7763): pid=18132 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043656.806:7764): pid=18132 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043656.809:7765): pid=18166 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043656.809:7766): pid=18166 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043656.810:7767): pid=18166 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043656.811:7768): pid=18166 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043656.840:7769): pid=18132 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043656.840:7770): pid=18132 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043656.841:7771): pid=18132 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043656.841:7772): pid=18132 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043656.841:7773): pid=18132 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043656.841:7774): pid=18132 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043656.841:7775): pid=18132 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043656.841:7776): pid=18132 uid=0 auid=0 ses=140 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18132 suid=0 rport=53046 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538043659.540:7777): table=filter family=2 entries=24 >type=SYSCALL msg=audit(1538043659.540:7777): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a3c180 items=0 ppid=12057 pid=18182 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043659.540:7777): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540031002D2D77616974002D740066696C746572002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730038373737002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E7400303031206365696C6F6D657465722D61 >type=CRYPTO_KEY_USER msg=audit(1538043659.881:7778): pid=18214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18214 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043659.881:7779): pid=18214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18214 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043659.881:7780): pid=18214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18214 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043659.884:7781): pid=18213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18214 suid=74 rport=53048 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043659.884:7782): pid=18213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18214 suid=74 rport=53048 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043659.961:7783): pid=18213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53048 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043659.961:7784): pid=18213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53048 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043659.971:7785): pid=18213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043659.971:7786): pid=18213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18214 suid=74 rport=53048 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043659.974:7787): pid=18213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043659.974:7788): pid=18213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043659.974:7789): pid=18213 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=141 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043660.134:7790): pid=18213 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043660.156:7791): pid=18213 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043660.200:7792): pid=18213 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043660.200:7793): pid=18213 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043660.203:7794): pid=18216 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18216 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043660.203:7795): pid=18216 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18216 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043660.203:7796): pid=18216 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18216 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043660.204:7797): pid=18216 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043660.229:7798): pid=18213 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043660.229:7799): pid=18213 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043660.229:7800): pid=18213 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043660.229:7801): pid=18213 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043660.229:7802): pid=18213 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043660.229:7803): pid=18213 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043660.229:7804): pid=18213 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043660.230:7805): pid=18213 uid=0 auid=0 ses=141 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18213 suid=0 rport=53048 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538043661.070:7806): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538043661.070:7806): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=159c5d0 items=0 ppid=12057 pid=18227 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043661.070:7806): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E505554003134002D2D77616974002D740066696C746572002D73003137322E31362E312E31332F3332002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730036333739002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D65 >type=SERVICE_START msg=audit(1538043661.243:7807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043661.243:7808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043661.244:7809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043661.256:7810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538043661.402:7811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=redis comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043662.101:7812): pid=18331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538043662.102:7813): pid=18331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538043662.102:7814): pid=18331 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=142 res=1 >type=USER_START msg=audit(1538043662.126:7815): pid=18331 uid=0 auid=163 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538043662.126:7816): pid=18331 uid=0 auid=163 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538043663.282:7817): pid=18350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043663.283:7818): pid=18350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043663.283:7819): pid=18350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043663.284:7820): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18350 suid=74 rport=53050 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043663.285:7821): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18350 suid=74 rport=53050 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043663.342:7822): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53050 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043663.342:7823): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53050 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043663.349:7824): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043663.349:7825): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18350 suid=74 rport=53050 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043663.352:7826): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043663.352:7827): pid=18349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043663.352:7828): pid=18349 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=143 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043663.541:7829): pid=18349 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043663.563:7830): pid=18349 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043663.605:7831): pid=18349 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043663.606:7832): pid=18349 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043663.606:7833): pid=18360 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043663.607:7834): pid=18360 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043663.607:7835): pid=18360 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18360 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043663.608:7836): pid=18360 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043663.631:7837): pid=18349 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043663.632:7838): pid=18349 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043663.632:7839): pid=18349 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043663.633:7840): pid=18349 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043663.633:7841): pid=18349 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043663.633:7842): pid=18349 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043663.633:7843): pid=18349 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18349 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043663.633:7844): pid=18349 uid=0 auid=0 ses=143 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18349 suid=0 rport=53050 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538043663.647:7845): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538043663.647:7845): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=25d7a30 items=0 ppid=12057 pid=18364 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043663.647:7845): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540031002D2D77616974002D740066696C746572002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730038303432002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E740030303120616F64682D61706920696E63 >type=CRED_DISP msg=audit(1538043664.174:7846): pid=18331 uid=0 auid=163 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538043664.180:7847): pid=18331 uid=0 auid=163 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=NETFILTER_CFG msg=audit(1538043665.198:7848): table=filter family=2 entries=27 >type=SYSCALL msg=audit(1538043665.198:7848): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=952e80 items=0 ppid=12057 pid=18404 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538043665.198:7848): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E5055540031002D2D77616974002D740066696C746572002D73003137322E31362E312E31332F3332002D7000746370002D6D006D756C7469706F7274002D2D64706F72747300353637312C35363732002D6A00414343455054002D6D00636F6D6D656E74002D2D63 >type=CRYPTO_KEY_USER msg=audit(1538043666.670:7849): pid=18451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043666.670:7850): pid=18451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043666.670:7851): pid=18451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043666.672:7852): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18451 suid=74 rport=53054 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043666.672:7853): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18451 suid=74 rport=53054 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043666.728:7854): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53054 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043666.728:7855): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53054 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043666.736:7856): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043666.737:7857): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18451 suid=74 rport=53054 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043666.738:7858): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043666.738:7859): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043666.738:7860): pid=18450 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=144 res=1 >type=SERVICE_START msg=audit(1538043666.818:7861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043666.818:7862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043666.820:7863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043666.869:7864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538043666.902:7865): pid=18450 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043666.924:7866): pid=18450 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043666.966:7867): pid=18450 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043666.966:7868): pid=18450 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043666.968:7869): pid=18456 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043666.968:7870): pid=18456 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043666.968:7871): pid=18456 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043666.969:7872): pid=18456 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043666.991:7873): pid=18450 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043666.991:7874): pid=18450 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043666.992:7875): pid=18450 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043666.992:7876): pid=18450 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043666.992:7877): pid=18450 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043666.992:7878): pid=18450 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043666.992:7879): pid=18450 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043666.992:7880): pid=18450 uid=0 auid=0 ses=144 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18450 suid=0 rport=53054 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043669.223:7881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-ceilometer-central comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043670.030:7882): pid=18541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043670.031:7883): pid=18541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043670.031:7884): pid=18541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043670.034:7885): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18541 suid=74 rport=53056 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043670.034:7886): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18541 suid=74 rport=53056 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043670.093:7887): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53056 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043670.093:7888): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53056 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043670.101:7889): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043670.102:7890): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18541 suid=74 rport=53056 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043670.105:7891): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043670.105:7892): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043670.105:7893): pid=18540 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=145 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043670.270:7894): pid=18540 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043670.290:7895): pid=18540 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043670.335:7896): pid=18540 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043670.336:7897): pid=18540 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043670.338:7898): pid=18545 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043670.338:7899): pid=18545 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043670.338:7900): pid=18545 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043670.339:7901): pid=18545 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043670.367:7902): pid=18540 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043670.367:7903): pid=18540 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043670.367:7904): pid=18540 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043670.367:7905): pid=18540 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043670.367:7906): pid=18540 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043670.368:7907): pid=18540 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043670.368:7908): pid=18540 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043670.368:7909): pid=18540 uid=0 auid=0 ses=145 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18540 suid=0 rport=53056 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043673.420:7910): pid=18614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043673.420:7911): pid=18614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043673.420:7912): pid=18614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043673.423:7913): pid=18613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18614 suid=74 rport=53062 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043673.423:7914): pid=18613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18614 suid=74 rport=53062 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043673.520:7915): pid=18613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53062 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043673.520:7916): pid=18613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53062 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043673.528:7917): pid=18613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043673.529:7918): pid=18613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18614 suid=74 rport=53062 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043673.531:7919): pid=18613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043673.531:7920): pid=18613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043673.531:7921): pid=18613 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=146 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043673.693:7922): pid=18613 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043673.723:7923): pid=18613 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043673.767:7924): pid=18613 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043673.767:7925): pid=18613 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043673.770:7926): pid=18616 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18616 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043673.770:7927): pid=18616 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18616 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043673.771:7928): pid=18616 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18616 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043673.772:7929): pid=18616 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043673.810:7930): pid=18613 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043673.811:7931): pid=18613 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043673.812:7932): pid=18613 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043673.812:7933): pid=18613 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043673.812:7934): pid=18613 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043673.812:7935): pid=18613 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043673.812:7936): pid=18613 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043673.813:7937): pid=18613 uid=0 auid=0 ses=146 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18613 suid=0 rport=53062 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043674.568:7938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043674.568:7939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043674.570:7940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043674.669:7941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538043675.649:7942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-cinder-api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043676.215:7943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-cinder-scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043676.738:7944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-cinder-volume comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043676.866:7945): pid=18813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043676.866:7946): pid=18813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043676.867:7947): pid=18813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043676.873:7948): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18813 suid=74 rport=53066 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043676.873:7949): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=18813 suid=74 rport=53066 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043676.937:7950): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53066 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043676.937:7951): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53066 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043676.946:7952): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043676.948:7953): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18813 suid=74 rport=53066 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043676.951:7954): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043676.952:7955): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043676.952:7956): pid=18812 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=147 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043677.127:7957): pid=18812 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043677.194:7958): pid=18812 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043677.238:7959): pid=18812 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043677.238:7960): pid=18812 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043677.239:7961): pid=18858 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043677.239:7962): pid=18858 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043677.239:7963): pid=18858 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043677.241:7964): pid=18858 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043677.271:7965): pid=18812 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043677.271:7966): pid=18812 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043677.272:7967): pid=18812 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043677.272:7968): pid=18812 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043677.273:7969): pid=18812 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=18812 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043677.273:7970): pid=18812 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=18812 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043677.273:7971): pid=18812 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=18812 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043677.273:7972): pid=18812 uid=0 auid=0 ses=147 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18812 suid=0 rport=53066 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043677.425:7973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-cinder-backup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043678.060:7974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=target comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043680.330:7975): pid=19076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043680.331:7976): pid=19076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043680.331:7977): pid=19076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043680.333:7978): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=19076 suid=74 rport=53074 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043680.334:7979): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=19076 suid=74 rport=53074 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043680.434:7980): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53074 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043680.434:7981): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53074 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043680.444:7982): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043680.445:7983): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19076 suid=74 rport=53074 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043680.448:7984): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043680.448:7985): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043680.449:7986): pid=19075 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=148 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043680.696:7987): pid=19075 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043680.727:7988): pid=19075 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043680.771:7989): pid=19075 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043680.771:7990): pid=19075 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043680.774:7991): pid=19079 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043680.774:7992): pid=19079 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043680.774:7993): pid=19079 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043680.775:7994): pid=19079 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043680.829:7995): pid=19075 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043680.829:7996): pid=19075 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043680.831:7997): pid=19075 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043680.831:7998): pid=19075 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043680.831:7999): pid=19075 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043680.831:8000): pid=19075 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043680.831:8001): pid=19075 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043680.832:8002): pid=19075 uid=0 auid=0 ses=148 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19075 suid=0 rport=53074 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043682.061:8003): pid=19100 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043682.062:8004): pid=19100 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D76657273696F6E terminal=? res=success' >type=CRED_REFR msg=audit(1538043682.063:8005): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AVC msg=audit(1538043682.101:8006): pid=2252 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_return dest=:1.410 spid=2405 tpid=19100 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:cinder_volume_t:s0 tclass=dbus exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1538043682.102:8007): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043682.650:8008): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043682.650:8009): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043682.781:8010): pid=19132 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043682.781:8011): pid=19132 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D6F206E616D652063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043682.782:8012): pid=19132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043682.801:8013): pid=19132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043683.264:8014): pid=19132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043683.265:8015): pid=19132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043683.318:8016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043683.318:8017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043683.319:8018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043683.368:8019): pid=19145 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043683.368:8020): pid=19145 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538043683.368:8021): pid=19145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043683.380:8022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043683.388:8023): pid=19145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043683.876:8024): pid=19160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19160 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043683.876:8025): pid=19160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19160 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043683.877:8026): pid=19160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19160 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043683.880:8027): pid=19158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=19160 suid=74 rport=53104 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043683.880:8028): pid=19158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=19160 suid=74 rport=53104 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_END msg=audit(1538043683.925:8029): pid=19145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043683.925:8030): pid=19145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538043683.946:8031): pid=19158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53104 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043683.947:8032): pid=19158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53104 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043683.953:8033): pid=19158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043683.954:8034): pid=19158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19160 suid=74 rport=53104 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043683.956:8035): pid=19158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043683.956:8036): pid=19158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043683.956:8037): pid=19158 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=149 res=1 >type=USER_ACCT msg=audit(1538043684.049:8038): pid=19163 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043684.049:8039): pid=19163 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D76657273696F6E terminal=? res=success' >type=CRED_REFR msg=audit(1538043684.050:8040): pid=19163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043684.064:8041): pid=19163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043684.121:8042): pid=19158 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043684.138:8043): pid=19158 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043684.182:8044): pid=19158 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043684.182:8045): pid=19158 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043684.185:8046): pid=19170 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043684.185:8047): pid=19170 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043684.185:8048): pid=19170 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043684.186:8049): pid=19170 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043684.209:8050): pid=19158 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043684.210:8051): pid=19158 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043684.210:8052): pid=19158 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043684.210:8053): pid=19158 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043684.210:8054): pid=19158 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043684.210:8055): pid=19158 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043684.210:8056): pid=19158 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043684.210:8057): pid=19158 uid=0 auid=0 ses=149 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19158 suid=0 rport=53104 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_END msg=audit(1538043684.255:8058): pid=19163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043684.255:8059): pid=19163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043684.347:8060): pid=19177 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043684.348:8061): pid=19177 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043684.348:8062): pid=19177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043684.358:8063): pid=19177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043684.581:8064): pid=19177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043684.581:8065): pid=19177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043684.701:8066): pid=19185 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043684.701:8067): pid=19185 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76637265617465202D54202D4C2031392E3537672063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538043684.701:8068): pid=19185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043684.709:8069): pid=19185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043684.984:8070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dm-event comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043685.071:8071): pid=19185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043685.071:8072): pid=19185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043685.177:8073): pid=19258 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043685.178:8074): pid=19258 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D76657273696F6E terminal=? res=success' >type=CRED_REFR msg=audit(1538043685.178:8075): pid=19258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043685.212:8076): pid=19258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043685.416:8077): pid=19258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043685.417:8078): pid=19258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043685.553:8079): pid=19273 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043685.553:8080): pid=19273 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D4B2063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538043685.553:8081): pid=19273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043685.563:8082): pid=19273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043686.082:8083): pid=19273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043686.083:8084): pid=19273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043686.228:8085): pid=19294 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043686.229:8086): pid=19294 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D76657273696F6E terminal=? res=success' >type=CRED_REFR msg=audit(1538043686.229:8087): pid=19294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043686.238:8088): pid=19294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043686.659:8089): pid=19294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043686.659:8090): pid=19294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043686.816:8091): pid=19313 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043686.816:8092): pid=19313 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320707673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A652C66726565202D2D736570617261746F72207C202D2D6E6F737566666978202D2D69676E6F7265736B6970706564636C7573746572 terminal=? res=success' >type=CRED_REFR msg=audit(1538043686.817:8093): pid=19313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043686.827:8094): pid=19313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043687.258:8095): pid=19324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19324 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043687.259:8096): pid=19324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19324 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043687.259:8097): pid=19324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19324 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043687.261:8098): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=19324 suid=74 rport=53108 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043687.261:8099): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=19324 suid=74 rport=53108 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_END msg=audit(1538043687.309:8100): pid=19313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043687.310:8101): pid=19313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538043687.323:8102): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043687.323:8103): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043687.332:8104): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043687.334:8105): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19324 suid=74 rport=53108 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043687.335:8106): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043687.335:8107): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043687.335:8108): pid=19321 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=150 res=1 >type=USER_ACCT msg=audit(1538043687.433:8109): pid=19327 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043687.434:8110): pid=19327 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043687.434:8111): pid=19327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043687.460:8112): pid=19327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043687.499:8113): pid=19321 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043687.515:8114): pid=19321 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043687.558:8115): pid=19321 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043687.558:8116): pid=19321 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043687.561:8117): pid=19331 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043687.561:8118): pid=19331 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043687.561:8119): pid=19331 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043687.562:8120): pid=19331 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043687.586:8121): pid=19321 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043687.586:8122): pid=19321 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043687.586:8123): pid=19321 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043687.586:8124): pid=19321 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043687.587:8125): pid=19321 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043687.587:8126): pid=19321 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043687.587:8127): pid=19321 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043687.587:8128): pid=19321 uid=0 auid=0 ses=150 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19321 suid=0 rport=53108 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_END msg=audit(1538043688.001:8129): pid=19327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043688.001:8130): pid=19327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043688.149:8131): pid=19340 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043688.149:8132): pid=19340 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043688.150:8133): pid=19340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043688.163:8134): pid=19340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043688.351:8135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gnocchi-metricd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043688.698:8136): pid=19340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043688.699:8137): pid=19340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043688.727:8138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gnocchi-statsd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043688.791:8139): pid=19455 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043688.791:8140): pid=19455 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043688.791:8141): pid=19455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043688.834:8142): pid=19455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043689.074:8143): pid=19455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043689.074:8144): pid=19455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043689.175:8145): pid=19513 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043689.175:8146): pid=19513 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538043689.176:8147): pid=19513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043689.194:8148): pid=19513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043689.499:8149): pid=19513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043689.500:8150): pid=19513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043689.618:8151): pid=19546 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043689.619:8152): pid=19546 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D76657273696F6E terminal=? res=success' >type=CRED_REFR msg=audit(1538043689.619:8153): pid=19546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043689.628:8154): pid=19546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043689.837:8155): pid=19546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043689.837:8156): pid=19546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043689.937:8157): pid=19581 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043689.937:8158): pid=19581 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538043689.937:8159): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043689.947:8160): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043690.207:8161): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043690.207:8162): pid=19581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043690.219:8163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-aodh-evaluator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043690.315:8164): pid=19621 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043690.316:8165): pid=19621 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D76657273696F6E terminal=? res=success' >type=CRED_REFR msg=audit(1538043690.316:8166): pid=19621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043690.402:8167): pid=19621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043690.641:8168): pid=19710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043690.642:8169): pid=19710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043690.642:8170): pid=19710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043690.646:8171): pid=19695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=19710 suid=74 rport=53212 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043690.646:8172): pid=19695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=19710 suid=74 rport=53212 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043690.706:8173): pid=19695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=53212 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043690.706:8174): pid=19695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=53212 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043690.717:8175): pid=19695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043690.718:8176): pid=19695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19710 suid=74 rport=53212 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043690.720:8177): pid=19695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043690.721:8178): pid=19695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043690.721:8179): pid=19695 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=151 res=1 >type=USER_END msg=audit(1538043690.729:8180): pid=19621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043690.729:8181): pid=19621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043690.766:8182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-aodh-notifier comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043690.889:8183): pid=19715 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043690.889:8184): pid=19715 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538043690.890:8185): pid=19715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043690.913:8186): pid=19715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043690.965:8187): pid=19695 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043691.071:8188): pid=19695 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043691.115:8189): pid=19695 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043691.115:8190): pid=19695 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043691.116:8191): pid=19770 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043691.116:8192): pid=19770 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043691.116:8193): pid=19770 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043691.117:8194): pid=19770 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043691.156:8195): pid=19695 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043691.157:8196): pid=19695 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043691.158:8197): pid=19695 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043691.158:8198): pid=19695 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043691.158:8199): pid=19695 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043691.159:8200): pid=19695 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043691.159:8201): pid=19695 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043691.159:8202): pid=19695 uid=0 auid=0 ses=151 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19695 suid=0 rport=53212 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043691.354:8203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-aodh-listener comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043691.368:8204): pid=19715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043691.368:8205): pid=19715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043691.500:8206): pid=19808 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043691.500:8207): pid=19808 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043691.501:8208): pid=19808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043691.750:8209): pid=19808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043692.375:8210): pid=19808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043692.375:8211): pid=19808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043692.538:8212): pid=19896 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043692.538:8213): pid=19896 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043692.539:8214): pid=19896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043692.558:8215): pid=19896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043692.794:8216): pid=19896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043692.795:8217): pid=19896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043692.953:8218): pid=19917 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043692.953:8219): pid=19917 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538043692.953:8220): pid=19917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043692.974:8221): pid=19917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043693.238:8222): pid=19917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043693.238:8223): pid=19917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043693.378:8224): pid=19931 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043693.378:8225): pid=19931 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043693.378:8226): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043693.387:8227): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043693.614:8228): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043693.615:8229): pid=19931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043693.831:8230): pid=19939 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043693.832:8231): pid=19939 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043693.832:8232): pid=19939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043693.849:8233): pid=19939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043694.205:8234): pid=19952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043694.205:8235): pid=19952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043694.205:8236): pid=19952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043694.208:8237): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=19952 suid=74 rport=54146 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043694.208:8238): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=19952 suid=74 rport=54146 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043694.307:8239): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54146 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043694.307:8240): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54146 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043694.314:8241): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043694.315:8242): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19952 suid=74 rport=54146 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043694.316:8243): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043694.317:8244): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043694.317:8245): pid=19951 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=152 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043694.551:8246): pid=19951 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043694.582:8247): pid=19951 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043694.593:8248): pid=19939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043694.593:8249): pid=19939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538043694.625:8250): pid=19951 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043694.626:8251): pid=19951 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043694.628:8252): pid=19958 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043694.628:8253): pid=19958 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043694.628:8254): pid=19958 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043694.629:8255): pid=19958 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043694.660:8256): pid=19951 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043694.660:8257): pid=19951 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043694.661:8258): pid=19951 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043694.661:8259): pid=19951 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043694.661:8260): pid=19951 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=19951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043694.661:8261): pid=19951 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=19951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043694.661:8262): pid=19951 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=19951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043694.661:8263): pid=19951 uid=0 auid=0 ses=152 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19951 suid=0 rport=54146 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043694.699:8264): pid=19957 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043694.700:8265): pid=19957 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043694.700:8266): pid=19957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043694.710:8267): pid=19957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043694.936:8268): pid=19957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043694.936:8269): pid=19957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043695.025:8270): pid=19970 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043695.025:8271): pid=19970 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538043695.025:8272): pid=19970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043695.033:8273): pid=19970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043695.273:8274): pid=19970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043695.273:8275): pid=19970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043695.413:8276): pid=19979 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043695.413:8277): pid=19979 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043695.414:8278): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043695.425:8279): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043695.885:8280): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043695.885:8281): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043696.277:8282): pid=19989 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043696.277:8283): pid=19989 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043696.277:8284): pid=19989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043696.300:8285): pid=19989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043696.535:8286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-heat-api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043696.847:8287): pid=19989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043696.847:8288): pid=19989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043697.009:8289): pid=20069 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043697.010:8290): pid=20069 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043697.010:8291): pid=20069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043697.083:8292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-heat-engine comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043697.216:8293): pid=20069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043697.554:8294): pid=20069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043697.554:8295): pid=20069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043697.672:8296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-heat-api-cfn comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043697.698:8297): pid=20153 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043697.699:8298): pid=20153 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538043697.699:8299): pid=20153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043697.712:8300): pid=20186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20186 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043697.712:8301): pid=20186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20186 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043697.712:8302): pid=20186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20186 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043697.713:8303): pid=20185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20186 suid=74 rport=54180 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043697.714:8304): pid=20185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20186 suid=74 rport=54180 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_START msg=audit(1538043697.747:8305): pid=20153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538043697.794:8306): pid=20185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54180 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043697.794:8307): pid=20185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54180 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043697.805:8308): pid=20185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043697.807:8309): pid=20185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20186 suid=74 rport=54180 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043697.808:8310): pid=20185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043697.809:8311): pid=20185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043697.809:8312): pid=20185 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=153 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043697.969:8313): pid=20185 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043698.034:8314): pid=20185 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043698.078:8315): pid=20185 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043698.078:8316): pid=20185 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043698.079:8317): pid=20250 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043698.079:8318): pid=20250 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043698.079:8319): pid=20250 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043698.080:8320): pid=20250 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043698.100:8321): pid=20185 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043698.101:8322): pid=20185 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043698.102:8323): pid=20185 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043698.102:8324): pid=20185 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043698.102:8325): pid=20185 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043698.102:8326): pid=20185 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043698.102:8327): pid=20185 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043698.102:8328): pid=20185 uid=0 auid=0 ses=153 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20185 suid=0 rport=54180 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_END msg=audit(1538043698.153:8329): pid=20153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043698.153:8330): pid=20153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043698.248:8331): pid=20267 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043698.249:8332): pid=20267 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043698.249:8333): pid=20267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043698.261:8334): pid=20267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043698.497:8335): pid=20267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043698.497:8336): pid=20267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043701.152:8337): pid=20320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043701.152:8338): pid=20320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043701.152:8339): pid=20320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043701.154:8340): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20320 suid=74 rport=54228 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043701.154:8341): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20320 suid=74 rport=54228 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043701.222:8342): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54228 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043701.222:8343): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54228 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043701.233:8344): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043701.234:8345): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20320 suid=74 rport=54228 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043701.235:8346): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043701.235:8347): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043701.236:8348): pid=20319 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=154 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043701.469:8349): pid=20319 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043701.495:8350): pid=20319 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043701.538:8351): pid=20319 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043701.538:8352): pid=20319 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043701.539:8353): pid=20323 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20323 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043701.539:8354): pid=20323 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20323 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043701.539:8355): pid=20323 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20323 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043701.541:8356): pid=20323 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043701.573:8357): pid=20319 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043701.573:8358): pid=20319 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043701.574:8359): pid=20319 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043701.574:8360): pid=20319 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043701.575:8361): pid=20319 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043701.575:8362): pid=20319 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043701.575:8363): pid=20319 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043701.575:8364): pid=20319 uid=0 auid=0 ses=154 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20319 suid=0 rport=54228 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043703.068:8365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043703.068:8366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043703.071:8367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043703.218:8368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043704.610:8369): pid=20371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043704.610:8370): pid=20371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043704.610:8371): pid=20371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043704.611:8372): pid=20370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20371 suid=74 rport=54230 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043704.612:8373): pid=20370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20371 suid=74 rport=54230 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043704.669:8374): pid=20370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54230 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043704.669:8375): pid=20370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54230 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043704.678:8376): pid=20370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043704.679:8377): pid=20370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20371 suid=74 rport=54230 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043704.681:8378): pid=20370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043704.681:8379): pid=20370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043704.681:8380): pid=20370 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=155 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043704.918:8381): pid=20370 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043704.949:8382): pid=20370 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043704.990:8383): pid=20370 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043704.990:8384): pid=20370 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043704.993:8385): pid=20374 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043704.993:8386): pid=20374 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043704.993:8387): pid=20374 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043704.994:8388): pid=20374 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043705.027:8389): pid=20370 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043705.027:8390): pid=20370 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043705.028:8391): pid=20370 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043705.028:8392): pid=20370 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043705.028:8393): pid=20370 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043705.029:8394): pid=20370 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043705.029:8395): pid=20370 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043705.029:8396): pid=20370 uid=0 auid=0 ses=155 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20370 suid=0 rport=54230 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043708.066:8397): pid=20449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043708.067:8398): pid=20449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043708.067:8399): pid=20449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043708.069:8400): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20449 suid=74 rport=54240 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043708.069:8401): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20449 suid=74 rport=54240 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043708.142:8402): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54240 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043708.142:8403): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54240 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043708.152:8404): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043708.153:8405): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20449 suid=74 rport=54240 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043708.155:8406): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043708.156:8407): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043708.156:8408): pid=20448 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=156 res=1 >type=SERVICE_START msg=audit(1538043708.320:8409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043708.320:8410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043708.323:8411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043708.349:8412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538043708.391:8413): pid=20448 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043708.418:8414): pid=20448 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043708.463:8415): pid=20448 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043708.463:8416): pid=20448 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043708.466:8417): pid=20455 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043708.466:8418): pid=20455 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043708.466:8419): pid=20455 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043708.468:8420): pid=20455 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043708.501:8421): pid=20448 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043708.501:8422): pid=20448 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043708.502:8423): pid=20448 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043708.502:8424): pid=20448 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043708.503:8425): pid=20448 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043708.503:8426): pid=20448 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043708.503:8427): pid=20448 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043708.503:8428): pid=20448 uid=0 auid=0 ses=156 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20448 suid=0 rport=54240 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043711.558:8429): pid=20465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043711.559:8430): pid=20465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043711.559:8431): pid=20465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043711.562:8432): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20465 suid=74 rport=54242 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043711.562:8433): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20465 suid=74 rport=54242 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043711.663:8434): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54242 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043711.663:8435): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54242 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043711.674:8436): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043711.675:8437): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20465 suid=74 rport=54242 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043711.676:8438): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043711.677:8439): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043711.677:8440): pid=20464 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=157 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043711.906:8441): pid=20464 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043711.940:8442): pid=20464 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043711.984:8443): pid=20464 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043711.984:8444): pid=20464 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043711.986:8445): pid=20468 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043711.987:8446): pid=20468 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043711.987:8447): pid=20468 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043711.989:8448): pid=20468 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043712.023:8449): pid=20464 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043712.023:8450): pid=20464 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043712.024:8451): pid=20464 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043712.024:8452): pid=20464 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043712.024:8453): pid=20464 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043712.024:8454): pid=20464 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043712.025:8455): pid=20464 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043712.025:8456): pid=20464 uid=0 auid=0 ses=157 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20464 suid=0 rport=54242 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043713.567:8457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043713.568:8458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043713.569:8459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043713.589:8460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043715.079:8461): pid=20483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043715.079:8462): pid=20483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043715.080:8463): pid=20483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043715.082:8464): pid=20482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20483 suid=74 rport=54246 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043715.082:8465): pid=20482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20483 suid=74 rport=54246 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043715.181:8466): pid=20482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54246 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043715.181:8467): pid=20482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54246 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043715.191:8468): pid=20482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043715.192:8469): pid=20482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20483 suid=74 rport=54246 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043715.199:8470): pid=20482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043715.199:8471): pid=20482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043715.200:8472): pid=20482 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=158 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043715.427:8473): pid=20482 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043715.458:8474): pid=20482 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043715.502:8475): pid=20482 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043715.503:8476): pid=20482 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043715.505:8477): pid=20486 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20486 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043715.505:8478): pid=20486 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20486 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043715.505:8479): pid=20486 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20486 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043715.507:8480): pid=20486 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043715.546:8481): pid=20482 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043715.547:8482): pid=20482 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043715.547:8483): pid=20482 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043715.547:8484): pid=20482 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043715.547:8485): pid=20482 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043715.547:8486): pid=20482 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043715.547:8487): pid=20482 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043715.547:8488): pid=20482 uid=0 auid=0 ses=158 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20482 suid=0 rport=54246 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043718.594:8489): pid=20510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043718.594:8490): pid=20510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043718.594:8491): pid=20510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043718.597:8492): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20510 suid=74 rport=54248 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043718.597:8493): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20510 suid=74 rport=54248 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043718.663:8494): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54248 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043718.663:8495): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54248 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043718.673:8496): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043718.673:8497): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20510 suid=74 rport=54248 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043718.675:8498): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043718.675:8499): pid=20509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043718.675:8500): pid=20509 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=159 res=1 >type=SERVICE_START msg=audit(1538043718.820:8501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043718.820:8502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043718.824:8503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043718.827:8504): pid=20509 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_STOP msg=audit(1538043718.850:8505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043718.868:8506): pid=20509 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043718.912:8507): pid=20509 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043718.912:8508): pid=20509 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043718.915:8509): pid=20516 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20516 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043718.915:8510): pid=20516 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20516 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043718.915:8511): pid=20516 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20516 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043718.917:8512): pid=20516 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043718.942:8513): pid=20509 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043718.942:8514): pid=20509 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043718.943:8515): pid=20509 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043718.944:8516): pid=20509 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043718.944:8517): pid=20509 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043718.944:8518): pid=20509 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043718.944:8519): pid=20509 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043718.945:8520): pid=20509 uid=0 auid=0 ses=159 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20509 suid=0 rport=54248 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043721.203:8521): pid=20521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538043721.204:8522): pid=20521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538043721.205:8523): pid=20521 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=160 res=1 >type=USER_START msg=audit(1538043721.244:8524): pid=20521 uid=0 auid=163 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538043721.245:8525): pid=20521 uid=0 auid=163 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538043721.992:8526): pid=20538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043721.992:8527): pid=20538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043721.992:8528): pid=20538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043721.994:8529): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20538 suid=74 rport=54252 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043721.995:8530): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20538 suid=74 rport=54252 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043722.085:8531): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54252 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043722.086:8532): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54252 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043722.093:8533): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043722.094:8534): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20538 suid=74 rport=54252 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043722.096:8535): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043722.096:8536): pid=20537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043722.097:8537): pid=20537 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=161 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043722.270:8538): pid=20537 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043722.305:8539): pid=20537 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043722.349:8540): pid=20537 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043722.349:8541): pid=20537 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043722.350:8542): pid=20547 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043722.350:8543): pid=20547 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043722.351:8544): pid=20547 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043722.352:8545): pid=20547 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043722.387:8546): pid=20537 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043722.388:8547): pid=20537 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043722.388:8548): pid=20537 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043722.389:8549): pid=20537 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043722.389:8550): pid=20537 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043722.389:8551): pid=20537 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043722.389:8552): pid=20537 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043722.389:8553): pid=20537 uid=0 auid=0 ses=161 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20537 suid=0 rport=54252 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043724.069:8554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043724.069:8555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043724.070:8556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043724.081:8557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRED_DISP msg=audit(1538043724.264:8558): pid=20521 uid=0 auid=163 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538043724.272:8559): pid=20521 uid=0 auid=163 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538043725.426:8560): pid=20574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043725.426:8561): pid=20574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043725.426:8562): pid=20574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043725.428:8563): pid=20573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20574 suid=74 rport=54256 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043725.428:8564): pid=20573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20574 suid=74 rport=54256 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043725.527:8565): pid=20573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54256 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043725.527:8566): pid=20573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54256 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043725.536:8567): pid=20573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043725.537:8568): pid=20573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20574 suid=74 rport=54256 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043725.538:8569): pid=20573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043725.538:8570): pid=20573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043725.538:8571): pid=20573 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=162 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043725.700:8572): pid=20573 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043725.718:8573): pid=20573 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043725.762:8574): pid=20573 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043725.762:8575): pid=20573 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043725.765:8576): pid=20577 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043725.765:8577): pid=20577 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043725.765:8578): pid=20577 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043725.766:8579): pid=20577 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043725.800:8580): pid=20573 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043725.800:8581): pid=20573 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043725.801:8582): pid=20573 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043725.801:8583): pid=20573 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043725.802:8584): pid=20573 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043725.802:8585): pid=20573 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043725.802:8586): pid=20573 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043725.802:8587): pid=20573 uid=0 auid=0 ses=162 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20573 suid=0 rport=54256 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043728.863:8588): pid=20588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043728.864:8589): pid=20588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043728.864:8590): pid=20588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043728.867:8591): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20588 suid=74 rport=54262 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043728.867:8592): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20588 suid=74 rport=54262 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043728.968:8593): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54262 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043728.968:8594): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54262 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043728.977:8595): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043728.978:8596): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20588 suid=74 rport=54262 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043728.980:8597): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043728.980:8598): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043728.981:8599): pid=20587 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=163 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043729.210:8600): pid=20587 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043729.220:8601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043729.220:8602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043729.224:8603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043729.254:8604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043729.260:8605): pid=20587 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043729.304:8606): pid=20587 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043729.304:8607): pid=20587 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043729.307:8608): pid=20594 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20594 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043729.307:8609): pid=20594 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20594 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043729.307:8610): pid=20594 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20594 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043729.308:8611): pid=20594 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043729.342:8612): pid=20587 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043729.342:8613): pid=20587 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043729.343:8614): pid=20587 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043729.343:8615): pid=20587 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043729.343:8616): pid=20587 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20587 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043729.343:8617): pid=20587 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20587 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043729.343:8618): pid=20587 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20587 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043729.343:8619): pid=20587 uid=0 auid=0 ses=163 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20587 suid=0 rport=54262 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043732.392:8620): pid=20606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043732.393:8621): pid=20606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043732.393:8622): pid=20606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043732.395:8623): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20606 suid=74 rport=54264 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043732.395:8624): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20606 suid=74 rport=54264 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043732.493:8625): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54264 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043732.493:8626): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54264 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043732.500:8627): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043732.501:8628): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20606 suid=74 rport=54264 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043732.502:8629): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043732.503:8630): pid=20605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043732.503:8631): pid=20605 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=164 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043732.655:8632): pid=20605 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043732.675:8633): pid=20605 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043732.720:8634): pid=20605 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043732.720:8635): pid=20605 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043732.723:8636): pid=20609 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043732.723:8637): pid=20609 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043732.723:8638): pid=20609 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043732.724:8639): pid=20609 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043732.760:8640): pid=20605 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043732.760:8641): pid=20605 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043732.761:8642): pid=20605 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043732.761:8643): pid=20605 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043732.761:8644): pid=20605 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20605 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043732.762:8645): pid=20605 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20605 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043732.762:8646): pid=20605 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20605 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043732.762:8647): pid=20605 uid=0 auid=0 ses=164 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20605 suid=0 rport=54264 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043734.317:8648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043734.317:8649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043734.319:8650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043734.337:8651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043735.807:8652): pid=20623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043735.808:8653): pid=20623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043735.808:8654): pid=20623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043735.810:8655): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20623 suid=74 rport=54268 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043735.811:8656): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20623 suid=74 rport=54268 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043735.872:8657): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54268 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043735.872:8658): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54268 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043735.881:8659): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043735.881:8660): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20623 suid=74 rport=54268 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043735.884:8661): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043735.884:8662): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043735.884:8663): pid=20622 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=165 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043736.115:8664): pid=20622 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043736.146:8665): pid=20622 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043736.191:8666): pid=20622 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043736.191:8667): pid=20622 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043736.194:8668): pid=20626 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20626 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043736.194:8669): pid=20626 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20626 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043736.194:8670): pid=20626 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20626 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043736.196:8671): pid=20626 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043736.232:8672): pid=20622 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043736.233:8673): pid=20622 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043736.233:8674): pid=20622 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043736.234:8675): pid=20622 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043736.234:8676): pid=20622 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20622 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043736.234:8677): pid=20622 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20622 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043736.234:8678): pid=20622 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20622 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043736.234:8679): pid=20622 uid=0 auid=0 ses=165 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20622 suid=0 rport=54268 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043739.292:8680): pid=20637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043739.292:8681): pid=20637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043739.292:8682): pid=20637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20637 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043739.296:8683): pid=20636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20637 suid=74 rport=54272 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043739.296:8684): pid=20636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20637 suid=74 rport=54272 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043739.395:8685): pid=20636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54272 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043739.395:8686): pid=20636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54272 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043739.405:8687): pid=20636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043739.406:8688): pid=20636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20637 suid=74 rport=54272 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043739.408:8689): pid=20636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043739.408:8690): pid=20636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043739.408:8691): pid=20636 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=166 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043739.563:8692): pid=20636 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043739.571:8693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043739.571:8694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043739.575:8695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043739.603:8696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043739.609:8697): pid=20636 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043739.655:8698): pid=20636 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043739.655:8699): pid=20636 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043739.658:8700): pid=20643 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043739.658:8701): pid=20643 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043739.658:8702): pid=20643 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043739.660:8703): pid=20643 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043739.686:8704): pid=20636 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043739.687:8705): pid=20636 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043739.687:8706): pid=20636 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043739.687:8707): pid=20636 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043739.687:8708): pid=20636 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043739.687:8709): pid=20636 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043739.687:8710): pid=20636 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043739.687:8711): pid=20636 uid=0 auid=0 ses=166 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20636 suid=0 rport=54272 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043742.747:8712): pid=20655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043742.747:8713): pid=20655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043742.747:8714): pid=20655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20655 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043742.751:8715): pid=20654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20655 suid=74 rport=54274 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043742.751:8716): pid=20654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20655 suid=74 rport=54274 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043742.853:8717): pid=20654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54274 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043742.853:8718): pid=20654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54274 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043742.860:8719): pid=20654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043742.861:8720): pid=20654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20655 suid=74 rport=54274 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043742.863:8721): pid=20654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043742.864:8722): pid=20654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043742.864:8723): pid=20654 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=167 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043743.026:8724): pid=20654 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043743.045:8725): pid=20654 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043743.089:8726): pid=20654 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043743.089:8727): pid=20654 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043743.091:8728): pid=20657 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043743.091:8729): pid=20657 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043743.092:8730): pid=20657 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043743.093:8731): pid=20657 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043743.126:8732): pid=20654 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043743.127:8733): pid=20654 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043743.127:8734): pid=20654 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043743.127:8735): pid=20654 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043743.127:8736): pid=20654 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043743.127:8737): pid=20654 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043743.127:8738): pid=20654 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043743.127:8739): pid=20654 uid=0 auid=0 ses=167 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20654 suid=0 rport=54274 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043744.817:8740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043744.817:8741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043744.819:8742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043744.836:8743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043746.189:8744): pid=20672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043746.189:8745): pid=20672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043746.190:8746): pid=20672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043746.192:8747): pid=20671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20672 suid=74 rport=54278 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043746.193:8748): pid=20671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20672 suid=74 rport=54278 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043746.292:8749): pid=20671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54278 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043746.292:8750): pid=20671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54278 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043746.301:8751): pid=20671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043746.302:8752): pid=20671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20672 suid=74 rport=54278 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043746.304:8753): pid=20671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043746.305:8754): pid=20671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043746.305:8755): pid=20671 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=168 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043746.539:8756): pid=20671 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043746.570:8757): pid=20671 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043746.614:8758): pid=20671 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043746.615:8759): pid=20671 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043746.616:8760): pid=20680 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043746.616:8761): pid=20680 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043746.616:8762): pid=20680 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043746.617:8763): pid=20680 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043746.649:8764): pid=20671 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043746.649:8765): pid=20671 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043746.650:8766): pid=20671 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043746.650:8767): pid=20671 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043746.651:8768): pid=20671 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043746.651:8769): pid=20671 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043746.651:8770): pid=20671 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043746.651:8771): pid=20671 uid=0 auid=0 ses=168 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20671 suid=0 rport=54278 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043749.700:8772): pid=20699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043749.700:8773): pid=20699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043749.700:8774): pid=20699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043749.703:8775): pid=20698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20699 suid=74 rport=54280 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043749.703:8776): pid=20698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20699 suid=74 rport=54280 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043749.761:8777): pid=20698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54280 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043749.761:8778): pid=20698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54280 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043749.770:8779): pid=20698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043749.771:8780): pid=20698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20699 suid=74 rport=54280 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043749.772:8781): pid=20698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043749.773:8782): pid=20698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043749.773:8783): pid=20698 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=169 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043749.945:8784): pid=20698 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043749.953:8785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043749.953:8786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043749.956:8787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043749.981:8788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043749.987:8789): pid=20698 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043750.031:8790): pid=20698 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043750.031:8791): pid=20698 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043750.034:8792): pid=20704 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043750.034:8793): pid=20704 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043750.034:8794): pid=20704 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20704 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043750.035:8795): pid=20704 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043750.070:8796): pid=20698 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043750.070:8797): pid=20698 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043750.070:8798): pid=20698 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043750.070:8799): pid=20698 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043750.070:8800): pid=20698 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043750.070:8801): pid=20698 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043750.070:8802): pid=20698 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043750.070:8803): pid=20698 uid=0 auid=0 ses=169 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20698 suid=0 rport=54280 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043753.112:8804): pid=20717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043753.113:8805): pid=20717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043753.113:8806): pid=20717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043753.117:8807): pid=20716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20717 suid=74 rport=54890 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043753.117:8808): pid=20716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20717 suid=74 rport=54890 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043753.215:8809): pid=20716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=54890 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043753.215:8810): pid=20716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=54890 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043753.225:8811): pid=20716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043753.226:8812): pid=20716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20717 suid=74 rport=54890 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043753.228:8813): pid=20716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043753.228:8814): pid=20716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043753.228:8815): pid=20716 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=170 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043753.389:8816): pid=20716 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043753.419:8817): pid=20716 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043753.464:8818): pid=20716 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043753.464:8819): pid=20716 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043753.467:8820): pid=20719 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043753.467:8821): pid=20719 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043753.467:8822): pid=20719 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043753.469:8823): pid=20719 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043753.504:8824): pid=20716 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043753.504:8825): pid=20716 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043753.506:8826): pid=20716 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043753.506:8827): pid=20716 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043753.506:8828): pid=20716 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043753.507:8829): pid=20716 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043753.507:8830): pid=20716 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20716 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043753.507:8831): pid=20716 uid=0 auid=0 ses=170 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20716 suid=0 rport=54890 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043755.068:8832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043755.068:8833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043755.071:8834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043755.090:8835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043756.539:8836): pid=20734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043756.540:8837): pid=20734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043756.540:8838): pid=20734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043756.543:8839): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20734 suid=74 rport=55312 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043756.543:8840): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20734 suid=74 rport=55312 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043756.609:8841): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55312 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043756.609:8842): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55312 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043756.618:8843): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043756.619:8844): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20734 suid=74 rport=55312 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043756.622:8845): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043756.622:8846): pid=20733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043756.622:8847): pid=20733 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=171 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043756.857:8848): pid=20733 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043756.890:8849): pid=20733 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043756.934:8850): pid=20733 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043756.934:8851): pid=20733 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043756.937:8852): pid=20736 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043756.937:8853): pid=20736 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043756.937:8854): pid=20736 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043756.939:8855): pid=20736 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043756.975:8856): pid=20733 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043756.976:8857): pid=20733 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043756.976:8858): pid=20733 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043756.977:8859): pid=20733 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043756.977:8860): pid=20733 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043756.977:8861): pid=20733 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043756.977:8862): pid=20733 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043756.977:8863): pid=20733 uid=0 auid=0 ses=171 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20733 suid=0 rport=55312 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043760.011:8864): pid=20759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043760.011:8865): pid=20759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043760.011:8866): pid=20759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043760.013:8867): pid=20758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20759 suid=74 rport=55314 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043760.013:8868): pid=20758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20759 suid=74 rport=55314 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043760.072:8869): pid=20758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55314 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043760.072:8870): pid=20758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55314 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043760.080:8871): pid=20758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043760.081:8872): pid=20758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20759 suid=74 rport=55314 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043760.083:8873): pid=20758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043760.083:8874): pid=20758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043760.084:8875): pid=20758 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=172 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043760.310:8876): pid=20758 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043760.320:8877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043760.320:8878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043760.324:8879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043760.358:8880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043760.363:8881): pid=20758 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043760.409:8882): pid=20758 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043760.409:8883): pid=20758 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043760.412:8884): pid=20765 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043760.412:8885): pid=20765 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043760.412:8886): pid=20765 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043760.413:8887): pid=20765 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043760.450:8888): pid=20758 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043760.450:8889): pid=20758 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043760.451:8890): pid=20758 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043760.451:8891): pid=20758 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043760.451:8892): pid=20758 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043760.451:8893): pid=20758 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043760.452:8894): pid=20758 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043760.452:8895): pid=20758 uid=0 auid=0 ses=172 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20758 suid=0 rport=55314 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043763.496:8896): pid=20777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043763.497:8897): pid=20777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043763.497:8898): pid=20777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043763.500:8899): pid=20776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20777 suid=74 rport=55316 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043763.500:8900): pid=20776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20777 suid=74 rport=55316 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043763.562:8901): pid=20776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55316 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043763.562:8902): pid=20776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55316 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043763.572:8903): pid=20776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043763.573:8904): pid=20776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20777 suid=74 rport=55316 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043763.575:8905): pid=20776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043763.575:8906): pid=20776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043763.575:8907): pid=20776 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=173 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043763.810:8908): pid=20776 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043763.839:8909): pid=20776 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043763.883:8910): pid=20776 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043763.883:8911): pid=20776 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043763.886:8912): pid=20780 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043763.886:8913): pid=20780 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043763.886:8914): pid=20780 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043763.888:8915): pid=20780 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043763.920:8916): pid=20776 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043763.920:8917): pid=20776 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043763.921:8918): pid=20776 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043763.921:8919): pid=20776 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043763.921:8920): pid=20776 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043763.921:8921): pid=20776 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043763.921:8922): pid=20776 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043763.921:8923): pid=20776 uid=0 auid=0 ses=173 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20776 suid=0 rport=55316 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043766.963:8924): pid=20859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043766.963:8925): pid=20859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043766.964:8926): pid=20859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20859 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043766.966:8927): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20859 suid=74 rport=55320 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043766.966:8928): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20859 suid=74 rport=55320 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043767.067:8929): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55320 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043767.067:8930): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55320 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043767.075:8931): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043767.076:8932): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20859 suid=74 rport=55320 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043767.077:8933): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043767.078:8934): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043767.078:8935): pid=20858 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=174 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043767.255:8936): pid=20858 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043767.284:8937): pid=20858 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043767.327:8938): pid=20858 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043767.327:8939): pid=20858 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043767.329:8940): pid=20861 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20861 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043767.329:8941): pid=20861 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20861 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043767.330:8942): pid=20861 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20861 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043767.331:8943): pid=20861 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043767.362:8944): pid=20858 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043767.363:8945): pid=20858 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043767.363:8946): pid=20858 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043767.363:8947): pid=20858 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043767.363:8948): pid=20858 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043767.363:8949): pid=20858 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043767.363:8950): pid=20858 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043767.363:8951): pid=20858 uid=0 auid=0 ses=174 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20858 suid=0 rport=55320 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043770.318:8952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043770.318:8953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043770.319:8954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043770.334:8955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043770.406:8956): pid=20875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20875 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043770.406:8957): pid=20875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20875 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043770.406:8958): pid=20875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20875 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043770.408:8959): pid=20874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20875 suid=74 rport=55322 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043770.408:8960): pid=20874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20875 suid=74 rport=55322 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043770.498:8961): pid=20874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55322 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043770.498:8962): pid=20874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55322 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043770.506:8963): pid=20874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043770.507:8964): pid=20874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20875 suid=74 rport=55322 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043770.508:8965): pid=20874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043770.508:8966): pid=20874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043770.509:8967): pid=20874 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=175 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043770.718:8968): pid=20874 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043770.735:8969): pid=20874 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043770.778:8970): pid=20874 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043770.779:8971): pid=20874 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043770.782:8972): pid=20877 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043770.782:8973): pid=20877 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043770.782:8974): pid=20877 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043770.784:8975): pid=20877 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043770.818:8976): pid=20874 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043770.818:8977): pid=20874 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043770.819:8978): pid=20874 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043770.819:8979): pid=20874 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043770.819:8980): pid=20874 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043770.820:8981): pid=20874 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043770.820:8982): pid=20874 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20874 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043770.820:8983): pid=20874 uid=0 auid=0 ses=175 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20874 suid=0 rport=55322 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043773.405:8984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-nova-api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043773.913:8985): pid=20923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043773.914:8986): pid=20923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043773.914:8987): pid=20923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043773.918:8988): pid=20922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20923 suid=74 rport=55342 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043773.918:8989): pid=20922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20923 suid=74 rport=55342 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043773.979:8990): pid=20922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55342 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043773.979:8991): pid=20922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55342 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043773.988:8992): pid=20922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043773.989:8993): pid=20922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20923 suid=74 rport=55342 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043773.992:8994): pid=20922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043773.992:8995): pid=20922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043773.992:8996): pid=20922 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=176 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043774.177:8997): pid=20922 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043774.230:8998): pid=20922 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043774.273:8999): pid=20922 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043774.273:9000): pid=20922 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043774.274:9001): pid=20952 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043774.275:9002): pid=20952 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043774.275:9003): pid=20952 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043774.276:9004): pid=20952 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043774.406:9005): pid=20922 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043774.406:9006): pid=20922 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043774.407:9007): pid=20922 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043774.407:9008): pid=20922 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043774.407:9009): pid=20922 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043774.407:9010): pid=20922 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043774.407:9011): pid=20922 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043774.407:9012): pid=20922 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20922 suid=0 rport=55342 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043775.619:9013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043775.619:9014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043777.345:9015): pid=20993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20993 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043777.346:9016): pid=20993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20993 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043777.346:9017): pid=20993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20993 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043777.349:9018): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20993 suid=74 rport=55346 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043777.349:9019): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=20993 suid=74 rport=55346 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043777.449:9020): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55346 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043777.449:9021): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55346 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043777.457:9022): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043777.458:9023): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20993 suid=74 rport=55346 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043777.460:9024): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043777.460:9025): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043777.460:9026): pid=20992 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=177 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043777.698:9027): pid=20992 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043777.727:9028): pid=20992 uid=0 auid=0 ses=177 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043777.772:9029): pid=20992 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043777.772:9030): pid=20992 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043777.775:9031): pid=20995 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043777.775:9032): pid=20995 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043777.775:9033): pid=20995 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043777.776:9034): pid=20995 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043777.805:9035): pid=20992 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043777.806:9036): pid=20992 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043777.806:9037): pid=20992 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043777.807:9038): pid=20992 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043777.807:9039): pid=20992 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=20992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043777.807:9040): pid=20992 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=20992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043777.807:9041): pid=20992 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=20992 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043777.807:9042): pid=20992 uid=0 auid=0 ses=177 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20992 suid=0 rport=55346 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043778.239:9043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-nova-conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043780.866:9044): pid=21090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043780.866:9045): pid=21090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043780.866:9046): pid=21090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043780.869:9047): pid=21089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21090 suid=74 rport=55366 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043780.871:9048): pid=21089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21090 suid=74 rport=55366 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043780.967:9049): pid=21089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55366 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043780.967:9050): pid=21089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55366 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043780.975:9051): pid=21089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043780.976:9052): pid=21089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21090 suid=74 rport=55366 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043780.977:9053): pid=21089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043780.977:9054): pid=21089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043780.977:9055): pid=21089 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=178 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043781.139:9056): pid=21089 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043781.169:9057): pid=21089 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043781.213:9058): pid=21089 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043781.213:9059): pid=21089 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043781.216:9060): pid=21093 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043781.216:9061): pid=21093 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043781.216:9062): pid=21093 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21093 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043781.218:9063): pid=21093 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043781.253:9064): pid=21089 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043781.253:9065): pid=21089 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043781.253:9066): pid=21089 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043781.253:9067): pid=21089 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043781.254:9068): pid=21089 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043781.254:9069): pid=21089 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043781.254:9070): pid=21089 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043781.254:9071): pid=21089 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21089 suid=0 rport=55366 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043781.424:9072): pid=21097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538043781.425:9073): pid=21097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538043781.426:9074): pid=21097 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=179 res=1 >type=USER_START msg=audit(1538043781.459:9075): pid=21097 uid=0 auid=163 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538043781.460:9076): pid=21097 uid=0 auid=163 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538043783.818:9077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043783.818:9078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043783.820:9079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043783.847:9080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538043783.853:9081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-nova-scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043784.310:9082): pid=21174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043784.310:9083): pid=21174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043784.310:9084): pid=21174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043784.313:9085): pid=21170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21174 suid=74 rport=55380 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043784.313:9086): pid=21170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21174 suid=74 rport=55380 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043784.375:9087): pid=21170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55380 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043784.375:9088): pid=21170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55380 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043784.383:9089): pid=21170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043784.385:9090): pid=21170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21174 suid=74 rport=55380 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043784.386:9091): pid=21170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043784.386:9092): pid=21170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043784.386:9093): pid=21170 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=180 res=1 >type=SERVICE_START msg=audit(1538043784.468:9094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-nova-novncproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043784.543:9095): pid=21170 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043784.653:9096): pid=21170 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043784.678:9097): pid=21097 uid=0 auid=163 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538043784.684:9098): pid=21097 uid=0 auid=163 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_LOGIN msg=audit(1538043784.697:9099): pid=21170 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043784.698:9100): pid=21170 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043784.699:9101): pid=21202 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043784.699:9102): pid=21202 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043784.699:9103): pid=21202 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043784.700:9104): pid=21202 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043784.741:9105): pid=21170 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043784.741:9106): pid=21170 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043784.742:9107): pid=21170 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043784.742:9108): pid=21170 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043784.743:9109): pid=21170 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043784.743:9110): pid=21170 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043784.743:9111): pid=21170 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043784.743:9112): pid=21170 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21170 suid=0 rport=55380 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043785.691:9113): pid=21280 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043785.692:9114): pid=21280 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043785.693:9115): pid=21280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043785.715:9116): pid=21280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043786.287:9117): pid=21280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043786.288:9118): pid=21280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043786.449:9119): pid=21297 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043786.449:9120): pid=21297 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043786.449:9121): pid=21297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043786.459:9122): pid=21297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043787.029:9123): pid=21297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043787.029:9124): pid=21297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043787.162:9125): pid=21307 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043787.163:9126): pid=21307 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538043787.163:9127): pid=21307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043787.180:9128): pid=21307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043787.757:9129): pid=21307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043787.757:9130): pid=21307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043787.791:9131): pid=21321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043787.791:9132): pid=21321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043787.791:9133): pid=21321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043787.794:9134): pid=21320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21321 suid=74 rport=55384 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043787.794:9135): pid=21320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21321 suid=74 rport=55384 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043787.861:9136): pid=21320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55384 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043787.861:9137): pid=21320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55384 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043787.869:9138): pid=21320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043787.870:9139): pid=21320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21321 suid=74 rport=55384 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043787.871:9140): pid=21320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043787.872:9141): pid=21320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043787.872:9142): pid=21320 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=181 res=1 >type=USER_ACCT msg=audit(1538043787.918:9143): pid=21319 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043787.919:9144): pid=21319 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043787.919:9145): pid=21319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043787.943:9146): pid=21319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043788.028:9147): pid=21320 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043788.058:9148): pid=21320 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043788.101:9149): pid=21320 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043788.101:9150): pid=21320 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043788.104:9151): pid=21325 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043788.104:9152): pid=21325 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043788.104:9153): pid=21325 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21325 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043788.106:9154): pid=21325 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043788.138:9155): pid=21320 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043788.138:9156): pid=21320 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043788.139:9157): pid=21320 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043788.140:9158): pid=21320 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043788.140:9159): pid=21320 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043788.140:9160): pid=21320 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043788.140:9161): pid=21320 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043788.140:9162): pid=21320 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21320 suid=0 rport=55384 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_END msg=audit(1538043788.507:9163): pid=21319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043788.507:9164): pid=21319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043790.318:9165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043790.318:9166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043790.320:9167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043790.340:9168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043791.186:9169): pid=21344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043791.187:9170): pid=21344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043791.187:9171): pid=21344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043791.189:9172): pid=21343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21344 suid=74 rport=55386 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043791.190:9173): pid=21343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21344 suid=74 rport=55386 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043791.257:9174): pid=21343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55386 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043791.257:9175): pid=21343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55386 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043791.266:9176): pid=21343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043791.267:9177): pid=21343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21344 suid=74 rport=55386 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043791.270:9178): pid=21343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043791.270:9179): pid=21343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043791.270:9180): pid=21343 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=182 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043791.433:9181): pid=21343 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043791.462:9182): pid=21343 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043791.505:9183): pid=21343 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043791.505:9184): pid=21343 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043791.507:9185): pid=21346 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043791.507:9186): pid=21346 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043791.508:9187): pid=21346 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043791.509:9188): pid=21346 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043791.538:9189): pid=21343 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043791.538:9190): pid=21343 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043791.539:9191): pid=21343 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043791.539:9192): pid=21343 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043791.540:9193): pid=21343 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043791.540:9194): pid=21343 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043791.540:9195): pid=21343 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043791.540:9196): pid=21343 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21343 suid=0 rport=55386 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043792.527:9197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-nova-consoleauth comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043794.597:9198): pid=21411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043794.597:9199): pid=21411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043794.597:9200): pid=21411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043794.600:9201): pid=21410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21411 suid=74 rport=55394 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043794.600:9202): pid=21410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21411 suid=74 rport=55394 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043794.668:9203): pid=21410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55394 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043794.668:9204): pid=21410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55394 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043794.678:9205): pid=21410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043794.679:9206): pid=21410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21411 suid=74 rport=55394 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043794.680:9207): pid=21410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043794.680:9208): pid=21410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043794.680:9209): pid=21410 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=183 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043794.835:9210): pid=21410 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043794.862:9211): pid=21410 uid=0 auid=0 ses=183 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043794.907:9212): pid=21410 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043794.907:9213): pid=21410 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043794.910:9214): pid=21413 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043794.910:9215): pid=21413 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043794.910:9216): pid=21413 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043794.912:9217): pid=21413 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043794.949:9218): pid=21410 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043794.950:9219): pid=21410 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043794.951:9220): pid=21410 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043794.951:9221): pid=21410 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043794.951:9222): pid=21410 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043794.951:9223): pid=21410 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043794.951:9224): pid=21410 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043794.952:9225): pid=21410 uid=0 auid=0 ses=183 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21410 suid=0 rport=55394 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043798.005:9226): pid=21426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043798.005:9227): pid=21426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043798.005:9228): pid=21426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043798.008:9229): pid=21425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21426 suid=74 rport=55400 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043798.008:9230): pid=21425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21426 suid=74 rport=55400 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043798.067:9231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043798.067:9232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043798.069:9233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538043798.110:9234): pid=21425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55400 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043798.110:9235): pid=21425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55400 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043798.119:9236): pid=21425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043798.120:9237): pid=21425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21426 suid=74 rport=55400 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043798.122:9238): pid=21425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043798.122:9239): pid=21425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043798.123:9240): pid=21425 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=184 res=1 >type=SERVICE_STOP msg=audit(1538043798.206:9241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538043798.358:9242): pid=21425 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043798.381:9243): pid=21425 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043798.424:9244): pid=21425 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043798.424:9245): pid=21425 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043798.427:9246): pid=21431 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043798.427:9247): pid=21431 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043798.428:9248): pid=21431 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043798.429:9249): pid=21431 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043798.464:9250): pid=21425 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043798.465:9251): pid=21425 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043798.466:9252): pid=21425 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043798.466:9253): pid=21425 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043798.466:9254): pid=21425 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043798.466:9255): pid=21425 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043798.467:9256): pid=21425 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043798.467:9257): pid=21425 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21425 suid=0 rport=55400 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043801.520:9258): pid=21489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043801.520:9259): pid=21489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043801.520:9260): pid=21489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043801.523:9261): pid=21473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21489 suid=74 rport=55404 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043801.523:9262): pid=21473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21489 suid=74 rport=55404 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043801.588:9263): pid=21473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55404 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043801.588:9264): pid=21473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55404 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043801.595:9265): pid=21473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043801.597:9266): pid=21473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21489 suid=74 rport=55404 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043801.598:9267): pid=21473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043801.599:9268): pid=21473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043801.599:9269): pid=21473 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=185 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043801.773:9270): pid=21473 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043801.865:9271): pid=21441 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-swift-account-2.17.1-0.20180314165245.caeeb54.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043801.924:9272): pid=21473 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043801.968:9273): pid=21473 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043801.968:9274): pid=21473 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043801.971:9275): pid=21523 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043801.971:9276): pid=21523 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043801.972:9277): pid=21523 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043801.973:9278): pid=21523 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043802.008:9279): pid=21473 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043802.008:9280): pid=21473 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043802.009:9281): pid=21473 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043802.009:9282): pid=21473 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043802.009:9283): pid=21473 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043802.010:9284): pid=21473 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043802.010:9285): pid=21473 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21473 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043802.010:9286): pid=21473 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21473 suid=0 rport=55404 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043805.057:9287): pid=21550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043805.058:9288): pid=21550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043805.058:9289): pid=21550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043805.061:9290): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21550 suid=74 rport=55408 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043805.061:9291): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21550 suid=74 rport=55408 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043805.130:9292): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55408 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043805.130:9293): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55408 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043805.139:9294): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043805.141:9295): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21550 suid=74 rport=55408 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043805.143:9296): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043805.143:9297): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043805.144:9298): pid=21549 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=186 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043805.387:9299): pid=21549 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538043805.838:9300): pid=21533 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-swift-container-2.17.1-0.20180314165245.caeeb54.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043805.852:9301): pid=21549 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043805.895:9302): pid=21549 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043805.895:9303): pid=21549 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043805.896:9304): pid=21633 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043805.896:9305): pid=21633 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043805.897:9306): pid=21633 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21633 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043805.897:9307): pid=21633 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043805.921:9308): pid=21549 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043805.921:9309): pid=21549 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043805.922:9310): pid=21549 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043805.922:9311): pid=21549 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043805.923:9312): pid=21549 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043805.923:9313): pid=21549 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043805.923:9314): pid=21549 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043805.923:9315): pid=21549 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21549 suid=0 rport=55408 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538043808.903:9316): pid=21643 uid=0 auid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-swift-object-2.17.1-0.20180314165245.caeeb54.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043808.968:9317): pid=21739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043808.968:9318): pid=21739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043808.968:9319): pid=21739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043808.972:9320): pid=21738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21739 suid=74 rport=55412 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043808.972:9321): pid=21738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21739 suid=74 rport=55412 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043809.064:9322): pid=21738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55412 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043809.064:9323): pid=21738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55412 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043809.072:9324): pid=21738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043809.074:9325): pid=21738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21739 suid=74 rport=55412 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043809.075:9326): pid=21738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043809.075:9327): pid=21738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043809.076:9328): pid=21738 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=187 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043809.321:9329): pid=21738 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043809.342:9330): pid=21738 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043809.387:9331): pid=21738 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043809.387:9332): pid=21738 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043809.390:9333): pid=21741 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043809.390:9334): pid=21741 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043809.390:9335): pid=21741 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043809.391:9336): pid=21741 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043809.418:9337): pid=21738 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043809.419:9338): pid=21738 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043809.420:9339): pid=21738 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043809.420:9340): pid=21738 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043809.420:9341): pid=21738 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043809.420:9342): pid=21738 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043809.420:9343): pid=21738 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043809.421:9344): pid=21738 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21738 suid=0 rport=55412 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043812.463:9345): pid=21777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043812.463:9346): pid=21777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043812.463:9347): pid=21777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043812.466:9348): pid=21776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21777 suid=74 rport=55894 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043812.466:9349): pid=21776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21777 suid=74 rport=55894 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043812.535:9350): pid=21776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=55894 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043812.535:9351): pid=21776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=55894 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043812.544:9352): pid=21776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043812.545:9353): pid=21776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21777 suid=74 rport=55894 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043812.547:9354): pid=21776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043812.547:9355): pid=21776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043812.548:9356): pid=21776 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=188 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043812.783:9357): pid=21776 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043812.804:9358): pid=21776 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043812.847:9359): pid=21776 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043812.847:9360): pid=21776 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043812.848:9361): pid=21791 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043812.848:9362): pid=21791 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043812.848:9363): pid=21791 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043812.849:9364): pid=21791 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043812.883:9365): pid=21776 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043812.883:9366): pid=21776 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043812.884:9367): pid=21776 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043812.885:9368): pid=21776 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043812.885:9369): pid=21776 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043812.885:9370): pid=21776 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043812.885:9371): pid=21776 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043812.885:9372): pid=21776 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21776 suid=0 rport=55894 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043814.067:9373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043814.067:9374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043814.070:9375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043814.231:9376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043815.925:9377): pid=21830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043815.925:9378): pid=21830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043815.926:9379): pid=21830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043815.928:9380): pid=21829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21830 suid=74 rport=56440 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043815.928:9381): pid=21829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21830 suid=74 rport=56440 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043816.028:9382): pid=21829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56440 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043816.028:9383): pid=21829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56440 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043816.038:9384): pid=21829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043816.039:9385): pid=21829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21830 suid=74 rport=56440 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043816.041:9386): pid=21829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043816.041:9387): pid=21829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043816.042:9388): pid=21829 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=189 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043816.277:9389): pid=21829 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043816.306:9390): pid=21829 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043816.350:9391): pid=21829 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043816.350:9392): pid=21829 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043816.353:9393): pid=21841 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043816.353:9394): pid=21841 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043816.354:9395): pid=21841 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21841 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043816.355:9396): pid=21841 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043816.389:9397): pid=21829 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043816.389:9398): pid=21829 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043816.390:9399): pid=21829 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043816.391:9400): pid=21829 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043816.391:9401): pid=21829 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043816.391:9402): pid=21829 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043816.391:9403): pid=21829 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043816.391:9404): pid=21829 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21829 suid=0 rport=56440 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043819.318:9405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043819.318:9406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043819.320:9407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043819.335:9408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043819.433:9409): pid=21888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043819.433:9410): pid=21888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043819.433:9411): pid=21888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043819.435:9412): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21888 suid=74 rport=56442 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043819.435:9413): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21888 suid=74 rport=56442 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043819.494:9414): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56442 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043819.494:9415): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56442 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043819.501:9416): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043819.502:9417): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21888 suid=74 rport=56442 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043819.503:9418): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043819.503:9419): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043819.503:9420): pid=21887 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=190 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043819.677:9421): pid=21887 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043819.697:9422): pid=21887 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043819.740:9423): pid=21887 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043819.741:9424): pid=21887 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043819.743:9425): pid=21895 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043819.743:9426): pid=21895 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043819.743:9427): pid=21895 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043819.745:9428): pid=21895 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043819.769:9429): pid=21887 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043819.769:9430): pid=21887 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043819.770:9431): pid=21887 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043819.770:9432): pid=21887 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043819.770:9433): pid=21887 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043819.770:9434): pid=21887 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043819.770:9435): pid=21887 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043819.771:9436): pid=21887 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21887 suid=0 rport=56442 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043822.817:9437): pid=21915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043822.818:9438): pid=21915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043822.818:9439): pid=21915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043822.821:9440): pid=21914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21915 suid=74 rport=56444 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043822.821:9441): pid=21914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21915 suid=74 rport=56444 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043822.889:9442): pid=21914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56444 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043822.890:9443): pid=21914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56444 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043822.898:9444): pid=21914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043822.898:9445): pid=21914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21915 suid=74 rport=56444 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043822.900:9446): pid=21914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043822.900:9447): pid=21914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043822.900:9448): pid=21914 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=191 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043823.066:9449): pid=21914 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043823.097:9450): pid=21914 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043823.141:9451): pid=21914 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043823.141:9452): pid=21914 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043823.144:9453): pid=21918 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043823.144:9454): pid=21918 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043823.144:9455): pid=21918 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21918 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043823.146:9456): pid=21918 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043823.182:9457): pid=21914 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043823.183:9458): pid=21914 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043823.184:9459): pid=21914 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043823.184:9460): pid=21914 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043823.184:9461): pid=21914 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043823.185:9462): pid=21914 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043823.185:9463): pid=21914 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043823.185:9464): pid=21914 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21914 suid=0 rport=56444 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043824.567:9465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043824.567:9466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043824.569:9467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043824.584:9468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043826.238:9469): pid=21931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043826.238:9470): pid=21931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043826.238:9471): pid=21931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043826.241:9472): pid=21930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21931 suid=74 rport=56446 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043826.241:9473): pid=21930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21931 suid=74 rport=56446 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043826.342:9474): pid=21930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56446 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043826.342:9475): pid=21930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56446 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043826.351:9476): pid=21930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043826.352:9477): pid=21930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21931 suid=74 rport=56446 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043826.355:9478): pid=21930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043826.355:9479): pid=21930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043826.355:9480): pid=21930 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=192 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043826.586:9481): pid=21930 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043826.614:9482): pid=21930 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043826.658:9483): pid=21930 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043826.659:9484): pid=21930 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043826.661:9485): pid=21934 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043826.661:9486): pid=21934 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043826.661:9487): pid=21934 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043826.663:9488): pid=21934 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043826.698:9489): pid=21930 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043826.699:9490): pid=21930 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043826.700:9491): pid=21930 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043826.700:9492): pid=21930 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043826.700:9493): pid=21930 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21930 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043826.700:9494): pid=21930 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21930 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043826.700:9495): pid=21930 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21930 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043826.700:9496): pid=21930 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21930 suid=0 rport=56446 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043829.771:9497): pid=21975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043829.772:9498): pid=21975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043829.772:9499): pid=21975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043829.774:9500): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21975 suid=74 rport=56448 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043829.774:9501): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21975 suid=74 rport=56448 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043829.817:9502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043829.817:9503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043829.821:9504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043829.836:9505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_AUTH msg=audit(1538043829.873:9506): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56448 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043829.874:9507): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56448 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043829.883:9508): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043829.884:9509): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21975 suid=74 rport=56448 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043829.886:9510): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043829.886:9511): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043829.886:9512): pid=21974 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=193 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043830.123:9513): pid=21974 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043830.151:9514): pid=21974 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043830.196:9515): pid=21974 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043830.196:9516): pid=21974 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043830.199:9517): pid=21981 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043830.199:9518): pid=21981 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043830.199:9519): pid=21981 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043830.201:9520): pid=21981 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043830.236:9521): pid=21974 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043830.237:9522): pid=21974 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043830.237:9523): pid=21974 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043830.238:9524): pid=21974 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043830.238:9525): pid=21974 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043830.238:9526): pid=21974 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043830.238:9527): pid=21974 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043830.238:9528): pid=21974 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21974 suid=0 rport=56448 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043833.277:9529): pid=21998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043833.277:9530): pid=21998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043833.277:9531): pid=21998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043833.280:9532): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21998 suid=74 rport=56450 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043833.280:9533): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=21998 suid=74 rport=56450 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043833.337:9534): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56450 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043833.337:9535): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56450 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043833.346:9536): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043833.346:9537): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21998 suid=74 rport=56450 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043833.348:9538): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043833.348:9539): pid=21997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043833.348:9540): pid=21997 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=194 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043833.502:9541): pid=21997 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043833.521:9542): pid=21997 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043833.563:9543): pid=21997 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043833.563:9544): pid=21997 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043833.565:9545): pid=22000 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043833.565:9546): pid=22000 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043833.565:9547): pid=22000 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043833.566:9548): pid=22000 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043833.601:9549): pid=21997 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043833.601:9550): pid=21997 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043833.601:9551): pid=21997 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043833.601:9552): pid=21997 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043833.601:9553): pid=21997 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=21997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043833.602:9554): pid=21997 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=21997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043833.602:9555): pid=21997 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=21997 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043833.602:9556): pid=21997 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21997 suid=0 rport=56450 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043835.067:9557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043835.067:9558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043835.069:9559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043835.085:9560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043836.655:9561): pid=22022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043836.656:9562): pid=22022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043836.656:9563): pid=22022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043836.658:9564): pid=22021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22022 suid=74 rport=56452 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043836.659:9565): pid=22021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22022 suid=74 rport=56452 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043836.721:9566): pid=22021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56452 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043836.721:9567): pid=22021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56452 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043836.729:9568): pid=22021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043836.730:9569): pid=22021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22022 suid=74 rport=56452 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043836.731:9570): pid=22021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043836.732:9571): pid=22021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043836.732:9572): pid=22021 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=195 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043836.967:9573): pid=22021 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043836.996:9574): pid=22021 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043837.041:9575): pid=22021 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043837.041:9576): pid=22021 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043837.044:9577): pid=22024 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043837.044:9578): pid=22024 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043837.044:9579): pid=22024 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043837.046:9580): pid=22024 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043837.080:9581): pid=22021 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043837.081:9582): pid=22021 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043837.082:9583): pid=22021 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043837.082:9584): pid=22021 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043837.082:9585): pid=22021 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043837.082:9586): pid=22021 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043837.083:9587): pid=22021 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043837.083:9588): pid=22021 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22021 suid=0 rport=56452 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043840.126:9589): pid=22035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043840.127:9590): pid=22035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043840.127:9591): pid=22035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043840.129:9592): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22035 suid=74 rport=56454 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043840.129:9593): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22035 suid=74 rport=56454 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043840.222:9594): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56454 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043840.222:9595): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56454 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043840.231:9596): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043840.232:9597): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22035 suid=74 rport=56454 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043840.233:9598): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043840.234:9599): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043840.234:9600): pid=22034 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=196 res=1 >type=SERVICE_START msg=audit(1538043840.318:9601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043840.318:9602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043840.321:9603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043840.347:9604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538043840.464:9605): pid=22034 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043840.492:9606): pid=22034 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043840.537:9607): pid=22034 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043840.537:9608): pid=22034 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043840.540:9609): pid=22040 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043840.540:9610): pid=22040 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043840.540:9611): pid=22040 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043840.542:9612): pid=22040 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043840.583:9613): pid=22034 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043840.584:9614): pid=22034 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043840.584:9615): pid=22034 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043840.585:9616): pid=22034 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043840.585:9617): pid=22034 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043840.585:9618): pid=22034 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043840.585:9619): pid=22034 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043840.585:9620): pid=22034 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22034 suid=0 rport=56454 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043841.706:9621): pid=22045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538043841.707:9622): pid=22045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538043841.708:9623): pid=22045 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=197 res=1 >type=USER_START msg=audit(1538043841.744:9624): pid=22045 uid=0 auid=163 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538043841.745:9625): pid=22045 uid=0 auid=163 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538043843.630:9626): pid=22067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22067 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043843.630:9627): pid=22067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22067 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043843.630:9628): pid=22067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22067 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043843.633:9629): pid=22066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22067 suid=74 rport=56456 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043843.633:9630): pid=22066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22067 suid=74 rport=56456 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043843.690:9631): pid=22066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56456 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043843.690:9632): pid=22066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56456 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043843.697:9633): pid=22066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043843.697:9634): pid=22066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22067 suid=74 rport=56456 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043843.699:9635): pid=22066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043843.700:9636): pid=22066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043843.700:9637): pid=22066 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=198 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043843.860:9638): pid=22066 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043843.877:9639): pid=22066 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043843.921:9640): pid=22066 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043843.921:9641): pid=22066 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043843.924:9642): pid=22070 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043843.924:9643): pid=22070 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043843.924:9644): pid=22070 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043843.925:9645): pid=22070 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043843.952:9646): pid=22066 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043843.952:9647): pid=22066 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043843.953:9648): pid=22066 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043843.953:9649): pid=22066 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043843.953:9650): pid=22066 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043843.954:9651): pid=22066 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043843.954:9652): pid=22066 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043843.954:9653): pid=22066 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22066 suid=0 rport=56456 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRED_DISP msg=audit(1538043844.190:9654): pid=22045 uid=0 auid=163 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538043844.195:9655): pid=22045 uid=0 auid=163 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538043845.567:9656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043845.567:9657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043845.569:9658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043845.585:9659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538043845.651:9660): pid=22077 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043845.651:9661): pid=22077 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043845.652:9662): pid=22077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043845.666:9663): pid=22077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043846.202:9664): pid=22077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043846.202:9665): pid=22077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043846.361:9666): pid=22089 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043846.361:9667): pid=22089 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043846.362:9668): pid=22089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043846.377:9669): pid=22089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043846.900:9670): pid=22089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043846.900:9671): pid=22089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043847.002:9672): pid=22103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043847.003:9673): pid=22103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043847.003:9674): pid=22103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043847.005:9675): pid=22101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22103 suid=74 rport=56460 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043847.006:9676): pid=22101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22103 suid=74 rport=56460 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043847.019:9677): pid=22097 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043847.019:9678): pid=22097 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538043847.019:9679): pid=22097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043847.029:9680): pid=22097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538043847.105:9681): pid=22101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56460 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043847.105:9682): pid=22101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56460 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043847.114:9683): pid=22101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043847.115:9684): pid=22101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22103 suid=74 rport=56460 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043847.117:9685): pid=22101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043847.118:9686): pid=22101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043847.118:9687): pid=22101 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=199 res=1 >type=USER_END msg=audit(1538043847.325:9688): pid=22097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043847.326:9689): pid=22097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043847.362:9690): pid=22101 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043847.388:9691): pid=22101 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043847.431:9692): pid=22101 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043847.431:9693): pid=22101 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043847.434:9694): pid=22114 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043847.434:9695): pid=22114 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043847.434:9696): pid=22114 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043847.436:9697): pid=22114 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043847.467:9698): pid=22101 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043847.467:9699): pid=22101 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043847.468:9700): pid=22101 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043847.469:9701): pid=22101 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043847.469:9702): pid=22101 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043847.469:9703): pid=22101 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043847.469:9704): pid=22101 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043847.470:9705): pid=22101 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22101 suid=0 rport=56460 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043847.489:9706): pid=22112 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043847.489:9707): pid=22112 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043847.490:9708): pid=22112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043847.510:9709): pid=22112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043848.047:9710): pid=22112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043848.047:9711): pid=22112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043850.507:9712): pid=22142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043850.508:9713): pid=22142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043850.508:9714): pid=22142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043850.511:9715): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22142 suid=74 rport=56462 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043850.511:9716): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22142 suid=74 rport=56462 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043850.609:9717): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56462 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043850.609:9718): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56462 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043850.618:9719): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043850.620:9720): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22142 suid=74 rport=56462 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043850.621:9721): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043850.622:9722): pid=22141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043850.622:9723): pid=22141 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=200 res=1 >type=SERVICE_START msg=audit(1538043850.818:9724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043850.818:9725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043850.820:9726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538043850.831:9727): pid=22141 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_STOP msg=audit(1538043850.842:9728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043850.850:9729): pid=22141 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043850.893:9730): pid=22141 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043850.893:9731): pid=22141 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043850.896:9732): pid=22148 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043850.896:9733): pid=22148 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043850.896:9734): pid=22148 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043850.897:9735): pid=22148 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043850.925:9736): pid=22141 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043850.926:9737): pid=22141 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043850.927:9738): pid=22141 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043850.927:9739): pid=22141 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043850.927:9740): pid=22141 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043850.927:9741): pid=22141 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043850.927:9742): pid=22141 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22141 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043850.928:9743): pid=22141 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22141 suid=0 rport=56462 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043853.970:9744): pid=22160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22160 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043853.971:9745): pid=22160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22160 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043853.971:9746): pid=22160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22160 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043853.974:9747): pid=22159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22160 suid=74 rport=56464 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043853.974:9748): pid=22159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22160 suid=74 rport=56464 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043854.053:9749): pid=22159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56464 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043854.053:9750): pid=22159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56464 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043854.063:9751): pid=22159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043854.064:9752): pid=22159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22160 suid=74 rport=56464 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043854.066:9753): pid=22159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043854.066:9754): pid=22159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043854.066:9755): pid=22159 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=201 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043854.300:9756): pid=22159 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043854.328:9757): pid=22159 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043854.373:9758): pid=22159 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043854.373:9759): pid=22159 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043854.376:9760): pid=22163 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043854.376:9761): pid=22163 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043854.376:9762): pid=22163 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043854.378:9763): pid=22163 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043854.411:9764): pid=22159 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043854.411:9765): pid=22159 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043854.412:9766): pid=22159 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043854.412:9767): pid=22159 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043854.412:9768): pid=22159 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043854.412:9769): pid=22159 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043854.413:9770): pid=22159 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043854.413:9771): pid=22159 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22159 suid=0 rport=56464 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043856.068:9772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043856.068:9773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043856.069:9774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043856.088:9775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043857.461:9776): pid=22176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22176 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043857.461:9777): pid=22176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22176 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043857.461:9778): pid=22176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22176 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043857.464:9779): pid=22175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22176 suid=74 rport=56466 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043857.464:9780): pid=22175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22176 suid=74 rport=56466 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043857.530:9781): pid=22175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56466 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043857.530:9782): pid=22175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56466 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043857.538:9783): pid=22175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043857.538:9784): pid=22175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22176 suid=74 rport=56466 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043857.540:9785): pid=22175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043857.540:9786): pid=22175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043857.540:9787): pid=22175 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=202 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043857.701:9788): pid=22175 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043857.731:9789): pid=22175 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043857.776:9790): pid=22175 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043857.776:9791): pid=22175 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043857.779:9792): pid=22178 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043857.779:9793): pid=22178 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043857.779:9794): pid=22178 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043857.781:9795): pid=22178 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043857.812:9796): pid=22175 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043857.812:9797): pid=22175 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043857.813:9798): pid=22175 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043857.813:9799): pid=22175 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043857.813:9800): pid=22175 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043857.814:9801): pid=22175 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043857.814:9802): pid=22175 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043857.814:9803): pid=22175 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22175 suid=0 rport=56466 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043860.863:9804): pid=22189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043860.864:9805): pid=22189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043860.864:9806): pid=22189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043860.867:9807): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22189 suid=74 rport=56468 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043860.867:9808): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22189 suid=74 rport=56468 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043860.968:9809): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56468 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043860.968:9810): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56468 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043860.979:9811): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043860.979:9812): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22189 suid=74 rport=56468 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043860.981:9813): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043860.982:9814): pid=22188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043860.982:9815): pid=22188 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=203 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043861.232:9816): pid=22188 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043861.242:9817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043861.242:9818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043861.245:9819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043861.275:9820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043861.281:9821): pid=22188 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043861.326:9822): pid=22188 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043861.327:9823): pid=22188 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043861.330:9824): pid=22194 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22194 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043861.330:9825): pid=22194 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22194 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043861.331:9826): pid=22194 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22194 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043861.332:9827): pid=22194 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043861.361:9828): pid=22188 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043861.362:9829): pid=22188 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043861.363:9830): pid=22188 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043861.363:9831): pid=22188 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043861.363:9832): pid=22188 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043861.363:9833): pid=22188 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043861.363:9834): pid=22188 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043861.363:9835): pid=22188 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22188 suid=0 rport=56468 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043864.411:9836): pid=22211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043864.412:9837): pid=22211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043864.412:9838): pid=22211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043864.414:9839): pid=22206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22211 suid=74 rport=56470 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043864.414:9840): pid=22206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22211 suid=74 rport=56470 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043864.488:9841): pid=22206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56470 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043864.488:9842): pid=22206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56470 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043864.498:9843): pid=22206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043864.499:9844): pid=22206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22211 suid=74 rport=56470 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043864.501:9845): pid=22206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043864.502:9846): pid=22206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043864.502:9847): pid=22206 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=204 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043864.743:9848): pid=22206 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043864.774:9849): pid=22206 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043864.818:9850): pid=22206 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043864.819:9851): pid=22206 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043864.820:9852): pid=22239 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043864.820:9853): pid=22239 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043864.820:9854): pid=22239 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22239 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043864.822:9855): pid=22239 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043864.854:9856): pid=22206 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043864.855:9857): pid=22206 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043864.856:9858): pid=22206 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043864.856:9859): pid=22206 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043864.856:9860): pid=22206 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043864.856:9861): pid=22206 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043864.856:9862): pid=22206 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043864.857:9863): pid=22206 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22206 suid=0 rport=56470 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043866.318:9864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043866.318:9865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043866.321:9866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043866.336:9867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043867.914:9868): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043867.914:9869): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043867.915:9870): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043867.917:9871): pid=22340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22341 suid=74 rport=56478 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043867.917:9872): pid=22340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22341 suid=74 rport=56478 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043868.009:9873): pid=22340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56478 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043868.009:9874): pid=22340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56478 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043868.018:9875): pid=22340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043868.020:9876): pid=22340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22341 suid=74 rport=56478 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043868.022:9877): pid=22340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043868.022:9878): pid=22340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043868.022:9879): pid=22340 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=205 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043868.215:9880): pid=22340 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043868.246:9881): pid=22340 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043868.291:9882): pid=22340 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043868.291:9883): pid=22340 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043868.294:9884): pid=22343 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043868.294:9885): pid=22343 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043868.294:9886): pid=22343 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043868.296:9887): pid=22343 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043868.329:9888): pid=22340 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043868.330:9889): pid=22340 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043868.331:9890): pid=22340 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043868.331:9891): pid=22340 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043868.331:9892): pid=22340 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043868.331:9893): pid=22340 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043868.331:9894): pid=22340 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043868.332:9895): pid=22340 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22340 suid=0 rport=56478 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043871.363:9896): pid=22405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22405 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043871.363:9897): pid=22405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22405 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043871.363:9898): pid=22405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22405 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043871.366:9899): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22405 suid=74 rport=56736 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043871.366:9900): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22405 suid=74 rport=56736 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043871.438:9901): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=56736 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043871.438:9902): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=56736 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043871.447:9903): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043871.448:9904): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22405 suid=74 rport=56736 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043871.449:9905): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043871.449:9906): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043871.450:9907): pid=22404 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=206 res=1 >type=SERVICE_START msg=audit(1538043871.450:9908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043871.450:9909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043871.451:9910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043871.464:9911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538043871.691:9912): pid=22404 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043871.715:9913): pid=22404 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043871.760:9914): pid=22404 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043871.760:9915): pid=22404 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043871.763:9916): pid=22412 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043871.763:9917): pid=22412 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043871.763:9918): pid=22412 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043871.764:9919): pid=22412 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043871.796:9920): pid=22404 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043871.797:9921): pid=22404 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043871.797:9922): pid=22404 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043871.797:9923): pid=22404 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043871.797:9924): pid=22404 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043871.797:9925): pid=22404 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043871.797:9926): pid=22404 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043871.797:9927): pid=22404 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22404 suid=0 rport=56736 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043874.856:9928): pid=22427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043874.856:9929): pid=22427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043874.856:9930): pid=22427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043874.859:9931): pid=22426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22427 suid=74 rport=57496 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043874.859:9932): pid=22426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22427 suid=74 rport=57496 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043874.959:9933): pid=22426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57496 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043874.959:9934): pid=22426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57496 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043874.969:9935): pid=22426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043874.969:9936): pid=22426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22427 suid=74 rport=57496 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043874.972:9937): pid=22426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043874.973:9938): pid=22426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043874.973:9939): pid=22426 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=207 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043875.203:9940): pid=22426 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043875.231:9941): pid=22426 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043875.275:9942): pid=22426 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043875.276:9943): pid=22426 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043875.278:9944): pid=22429 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22429 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043875.279:9945): pid=22429 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22429 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043875.279:9946): pid=22429 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22429 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043875.280:9947): pid=22429 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043875.315:9948): pid=22426 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043875.315:9949): pid=22426 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043875.316:9950): pid=22426 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043875.316:9951): pid=22426 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043875.323:9952): pid=22426 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043875.324:9953): pid=22426 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043875.324:9954): pid=22426 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043875.324:9955): pid=22426 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22426 suid=0 rport=57496 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043876.567:9956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043876.567:9957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043876.570:9958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043876.586:9959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043878.353:9960): pid=22457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043878.353:9961): pid=22457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043878.353:9962): pid=22457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043878.356:9963): pid=22456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22457 suid=74 rport=57510 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043878.356:9964): pid=22456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22457 suid=74 rport=57510 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043878.424:9965): pid=22456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57510 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043878.425:9966): pid=22456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57510 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043878.434:9967): pid=22456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043878.436:9968): pid=22456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22457 suid=74 rport=57510 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043878.437:9969): pid=22456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043878.437:9970): pid=22456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043878.438:9971): pid=22456 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=208 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043878.667:9972): pid=22456 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043878.693:9973): pid=22456 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043878.736:9974): pid=22456 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043878.736:9975): pid=22456 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043878.738:9976): pid=22459 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043878.739:9977): pid=22459 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043878.739:9978): pid=22459 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043878.740:9979): pid=22459 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043878.772:9980): pid=22456 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043878.772:9981): pid=22456 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043878.774:9982): pid=22456 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043878.774:9983): pid=22456 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043878.774:9984): pid=22456 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043878.774:9985): pid=22456 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043878.774:9986): pid=22456 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043878.775:9987): pid=22456 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22456 suid=0 rport=57510 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043881.830:9988): pid=22515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043881.831:9989): pid=22515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043881.831:9990): pid=22515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043881.834:9991): pid=22514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22515 suid=74 rport=57514 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043881.834:9992): pid=22514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22515 suid=74 rport=57514 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043881.895:9993): pid=22514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57514 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043881.895:9994): pid=22514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57514 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043881.906:9995): pid=22514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043881.908:9996): pid=22514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22515 suid=74 rport=57514 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043881.910:9997): pid=22514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043881.910:9998): pid=22514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043881.911:9999): pid=22514 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=209 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043882.070:10000): pid=22514 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043882.100:10001): pid=22514 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043882.144:10002): pid=22514 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043882.144:10003): pid=22514 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043882.147:10004): pid=22518 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043882.147:10005): pid=22518 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043882.147:10006): pid=22518 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043882.149:10007): pid=22518 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043882.177:10008): pid=22514 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043882.178:10009): pid=22514 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043882.178:10010): pid=22514 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043882.178:10011): pid=22514 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043882.178:10012): pid=22514 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043882.179:10013): pid=22514 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043882.179:10014): pid=22514 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043882.179:10015): pid=22514 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22514 suid=0 rport=57514 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043885.068:10016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043885.068:10017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043885.069:10018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043885.086:10019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043885.229:10020): pid=22554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043885.229:10021): pid=22554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043885.229:10022): pid=22554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043885.232:10023): pid=22553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22554 suid=74 rport=57516 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043885.232:10024): pid=22553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22554 suid=74 rport=57516 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043885.312:10025): pid=22553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57516 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043885.312:10026): pid=22553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57516 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043885.321:10027): pid=22553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043885.322:10028): pid=22553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22554 suid=74 rport=57516 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043885.324:10029): pid=22553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043885.325:10030): pid=22553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043885.325:10031): pid=22553 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=210 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043885.561:10032): pid=22553 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043885.590:10033): pid=22553 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043885.633:10034): pid=22553 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043885.633:10035): pid=22553 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043885.636:10036): pid=22557 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043885.636:10037): pid=22557 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043885.636:10038): pid=22557 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043885.638:10039): pid=22557 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043885.672:10040): pid=22553 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043885.672:10041): pid=22553 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043885.673:10042): pid=22553 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043885.673:10043): pid=22553 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043885.673:10044): pid=22553 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043885.673:10045): pid=22553 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043885.673:10046): pid=22553 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043885.673:10047): pid=22553 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22553 suid=0 rport=57516 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043888.725:10048): pid=22568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043888.726:10049): pid=22568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043888.726:10050): pid=22568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043888.729:10051): pid=22567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22568 suid=74 rport=57518 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043888.729:10052): pid=22567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22568 suid=74 rport=57518 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043888.798:10053): pid=22567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57518 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043888.798:10054): pid=22567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57518 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043888.806:10055): pid=22567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043888.807:10056): pid=22567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22568 suid=74 rport=57518 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043888.809:10057): pid=22567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043888.809:10058): pid=22567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043888.809:10059): pid=22567 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=211 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043888.969:10060): pid=22567 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043889.000:10061): pid=22567 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043889.044:10062): pid=22567 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043889.044:10063): pid=22567 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043889.047:10064): pid=22570 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043889.047:10065): pid=22570 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043889.047:10066): pid=22570 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043889.048:10067): pid=22570 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043889.083:10068): pid=22567 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043889.083:10069): pid=22567 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043889.084:10070): pid=22567 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043889.084:10071): pid=22567 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043889.084:10072): pid=22567 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043889.084:10073): pid=22567 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043889.084:10074): pid=22567 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043889.084:10075): pid=22567 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22567 suid=0 rport=57518 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043890.185:10076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043890.185:10077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043890.187:10078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043890.202:10079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043892.129:10080): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043892.130:10081): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043892.130:10082): pid=22615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043892.133:10083): pid=22614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22615 suid=74 rport=57520 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043892.133:10084): pid=22614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22615 suid=74 rport=57520 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043892.203:10085): pid=22614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57520 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043892.203:10086): pid=22614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57520 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043892.211:10087): pid=22614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043892.212:10088): pid=22614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22615 suid=74 rport=57520 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043892.214:10089): pid=22614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043892.214:10090): pid=22614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043892.214:10091): pid=22614 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=212 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043892.449:10092): pid=22614 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043892.474:10093): pid=22614 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043892.518:10094): pid=22614 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043892.519:10095): pid=22614 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043892.521:10096): pid=22618 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043892.521:10097): pid=22618 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043892.521:10098): pid=22618 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043892.523:10099): pid=22618 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043892.553:10100): pid=22614 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043892.554:10101): pid=22614 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043892.554:10102): pid=22614 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043892.555:10103): pid=22614 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043892.555:10104): pid=22614 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043892.555:10105): pid=22614 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043892.555:10106): pid=22614 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043892.555:10107): pid=22614 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22614 suid=0 rport=57520 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043894.120:10108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=httpd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043895.592:10109): pid=22826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043895.592:10110): pid=22826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043895.592:10111): pid=22826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043895.594:10112): pid=22825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22826 suid=74 rport=57524 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043895.594:10113): pid=22825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22826 suid=74 rport=57524 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043895.653:10114): pid=22825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57524 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043895.653:10115): pid=22825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57524 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043895.662:10116): pid=22825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043895.664:10117): pid=22825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22826 suid=74 rport=57524 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043895.665:10118): pid=22825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043895.666:10119): pid=22825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043895.666:10120): pid=22825 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=213 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043895.886:10121): pid=22825 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043895.904:10122): pid=22825 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043895.948:10123): pid=22825 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043895.948:10124): pid=22825 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043895.951:10125): pid=22828 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043895.951:10126): pid=22828 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043895.952:10127): pid=22828 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043895.953:10128): pid=22828 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043895.976:10129): pid=22825 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043895.976:10130): pid=22825 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043895.976:10131): pid=22825 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043895.976:10132): pid=22825 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043895.977:10133): pid=22825 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043895.977:10134): pid=22825 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043895.977:10135): pid=22825 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043895.977:10136): pid=22825 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22825 suid=0 rport=57524 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043899.019:10137): pid=22858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043899.019:10138): pid=22858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043899.019:10139): pid=22858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043899.021:10140): pid=22857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22858 suid=74 rport=57530 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043899.022:10141): pid=22857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22858 suid=74 rport=57530 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043899.101:10142): pid=22857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57530 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043899.101:10143): pid=22857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57530 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043899.110:10144): pid=22857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043899.110:10145): pid=22857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22858 suid=74 rport=57530 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043899.112:10146): pid=22857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043899.112:10147): pid=22857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043899.113:10148): pid=22857 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=214 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043899.346:10149): pid=22857 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043899.365:10150): pid=22857 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043899.408:10151): pid=22857 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043899.409:10152): pid=22857 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043899.411:10153): pid=22865 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043899.411:10154): pid=22865 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043899.411:10155): pid=22865 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043899.412:10156): pid=22865 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043899.433:10157): pid=22857 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043899.433:10158): pid=22857 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043899.433:10159): pid=22857 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043899.433:10160): pid=22857 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043899.434:10161): pid=22857 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043899.434:10162): pid=22857 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043899.434:10163): pid=22857 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043899.434:10164): pid=22857 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22857 suid=0 rport=57530 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043899.567:10165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043899.567:10166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043899.569:10167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043899.706:10168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538043901.214:10169): pid=22883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538043901.215:10170): pid=22883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538043901.215:10171): pid=22883 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=215 res=1 >type=USER_START msg=audit(1538043901.254:10172): pid=22883 uid=0 auid=163 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538043901.255:10173): pid=22883 uid=0 auid=163 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538043902.499:10174): pid=22902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043902.499:10175): pid=22902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043902.499:10176): pid=22902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043902.502:10177): pid=22901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22902 suid=74 rport=57536 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043902.502:10178): pid=22901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22902 suid=74 rport=57536 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043902.602:10179): pid=22901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57536 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043902.602:10180): pid=22901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57536 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043902.611:10181): pid=22901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043902.613:10182): pid=22901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22902 suid=74 rport=57536 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043902.614:10183): pid=22901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043902.615:10184): pid=22901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043902.615:10185): pid=22901 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=216 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043902.773:10186): pid=22901 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043902.792:10187): pid=22901 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043902.835:10188): pid=22901 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043902.835:10189): pid=22901 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043902.838:10190): pid=22910 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043902.838:10191): pid=22910 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043902.838:10192): pid=22910 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043902.840:10193): pid=22910 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043902.876:10194): pid=22901 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043902.877:10195): pid=22901 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043902.877:10196): pid=22901 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043902.877:10197): pid=22901 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043902.877:10198): pid=22901 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043902.877:10199): pid=22901 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043902.877:10200): pid=22901 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043902.877:10201): pid=22901 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22901 suid=0 rport=57536 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRED_DISP msg=audit(1538043903.312:10202): pid=22883 uid=0 auid=163 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538043903.318:10203): pid=22883 uid=0 auid=163 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538043904.819:10204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043904.819:10205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043904.821:10206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043904.836:10207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538043905.612:10208): pid=22939 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043905.612:10209): pid=22939 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043905.612:10210): pid=22939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043905.637:10211): pid=22939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043905.921:10212): pid=22952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043905.922:10213): pid=22952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043905.922:10214): pid=22952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043905.924:10215): pid=22949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22952 suid=74 rport=57542 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043905.924:10216): pid=22949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=22952 suid=74 rport=57542 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043906.020:10217): pid=22949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57542 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043906.020:10218): pid=22949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57542 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043906.029:10219): pid=22949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043906.030:10220): pid=22949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22952 suid=74 rport=57542 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043906.031:10221): pid=22949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043906.032:10222): pid=22949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043906.034:10223): pid=22949 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=217 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043906.293:10224): pid=22949 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043906.326:10225): pid=22949 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043906.327:10226): pid=22939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043906.328:10227): pid=22939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538043906.370:10228): pid=22949 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043906.370:10229): pid=22949 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043906.374:10230): pid=22961 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043906.374:10231): pid=22961 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043906.374:10232): pid=22961 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043906.376:10233): pid=22961 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043906.408:10234): pid=22949 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043906.409:10235): pid=22949 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043906.410:10236): pid=22949 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043906.410:10237): pid=22949 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043906.410:10238): pid=22949 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=22949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043906.411:10239): pid=22949 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=22949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043906.411:10240): pid=22949 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=22949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043906.411:10241): pid=22949 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22949 suid=0 rport=57542 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043906.486:10242): pid=22960 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043906.487:10243): pid=22960 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043906.487:10244): pid=22960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043906.508:10245): pid=22960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043906.790:10246): pid=22960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043906.790:10247): pid=22960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043906.891:10248): pid=22972 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043906.892:10249): pid=22972 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538043906.892:10250): pid=22972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043906.901:10251): pid=22972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043907.107:10252): pid=22972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043907.107:10253): pid=22972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043907.236:10254): pid=22988 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043907.236:10255): pid=22988 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043907.236:10256): pid=22988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043907.245:10257): pid=22988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043907.734:10258): pid=22988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043907.734:10259): pid=22988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043909.465:10260): pid=23004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043909.465:10261): pid=23004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043909.466:10262): pid=23004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043909.468:10263): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23004 suid=74 rport=57546 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043909.469:10264): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23004 suid=74 rport=57546 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043909.550:10265): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57546 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043909.550:10266): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57546 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043909.561:10267): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043909.562:10268): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23004 suid=74 rport=57546 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043909.565:10269): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043909.565:10270): pid=23003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043909.565:10271): pid=23003 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=218 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043909.802:10272): pid=23003 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043909.825:10273): pid=23003 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043909.869:10274): pid=23003 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043909.869:10275): pid=23003 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043909.870:10276): pid=23011 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043909.870:10277): pid=23011 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043909.870:10278): pid=23011 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043909.872:10279): pid=23011 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043909.901:10280): pid=23003 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043909.901:10281): pid=23003 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043909.902:10282): pid=23003 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043909.902:10283): pid=23003 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043909.902:10284): pid=23003 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043909.903:10285): pid=23003 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043909.903:10286): pid=23003 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043909.903:10287): pid=23003 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23003 suid=0 rport=57546 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043909.912:10288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043909.912:10289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043909.913:10290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043909.930:10291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043912.965:10292): pid=23046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043912.965:10293): pid=23046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043912.965:10294): pid=23046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043912.967:10295): pid=23045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23046 suid=74 rport=57552 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043912.967:10296): pid=23045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23046 suid=74 rport=57552 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043913.044:10297): pid=23045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57552 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043913.044:10298): pid=23045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57552 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043913.053:10299): pid=23045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043913.054:10300): pid=23045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23046 suid=74 rport=57552 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043913.055:10301): pid=23045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043913.055:10302): pid=23045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043913.056:10303): pid=23045 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=219 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043913.217:10304): pid=23045 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043913.245:10305): pid=23045 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043913.289:10306): pid=23045 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043913.289:10307): pid=23045 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043913.292:10308): pid=23048 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043913.292:10309): pid=23048 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043913.292:10310): pid=23048 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043913.295:10311): pid=23048 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043913.330:10312): pid=23045 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043913.330:10313): pid=23045 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043913.331:10314): pid=23045 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043913.331:10315): pid=23045 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043913.331:10316): pid=23045 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043913.332:10317): pid=23045 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043913.332:10318): pid=23045 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23045 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043913.332:10319): pid=23045 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23045 suid=0 rport=57552 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043915.067:10320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043915.068:10321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043915.070:10322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043915.089:10323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043916.387:10324): pid=23076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043916.387:10325): pid=23076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043916.387:10326): pid=23076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043916.390:10327): pid=23075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23076 suid=74 rport=57556 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043916.390:10328): pid=23075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23076 suid=74 rport=57556 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043916.463:10329): pid=23075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57556 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043916.463:10330): pid=23075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57556 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043916.472:10331): pid=23075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043916.472:10332): pid=23075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23076 suid=74 rport=57556 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043916.474:10333): pid=23075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043916.474:10334): pid=23075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043916.474:10335): pid=23075 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=220 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043916.632:10336): pid=23075 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043916.662:10337): pid=23075 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043916.706:10338): pid=23075 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043916.706:10339): pid=23075 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043916.709:10340): pid=23078 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043916.709:10341): pid=23078 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043916.710:10342): pid=23078 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23078 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043916.711:10343): pid=23078 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043916.749:10344): pid=23075 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043916.749:10345): pid=23075 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043916.750:10346): pid=23075 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043916.750:10347): pid=23075 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043916.750:10348): pid=23075 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043916.750:10349): pid=23075 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043916.750:10350): pid=23075 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043916.751:10351): pid=23075 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23075 suid=0 rport=57556 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043919.798:10352): pid=23104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043919.798:10353): pid=23104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043919.798:10354): pid=23104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23104 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043919.801:10355): pid=23103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23104 suid=74 rport=57562 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043919.801:10356): pid=23103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23104 suid=74 rport=57562 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043919.901:10357): pid=23103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57562 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043919.901:10358): pid=23103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57562 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043919.909:10359): pid=23103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043919.910:10360): pid=23103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23104 suid=74 rport=57562 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043919.912:10361): pid=23103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043919.912:10362): pid=23103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043919.913:10363): pid=23103 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=221 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043920.148:10364): pid=23103 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043920.157:10365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043920.157:10366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043920.162:10367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043920.184:10368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043920.190:10369): pid=23103 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043920.233:10370): pid=23103 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043920.233:10371): pid=23103 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043920.236:10372): pid=23113 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23113 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043920.236:10373): pid=23113 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23113 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043920.237:10374): pid=23113 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23113 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043920.238:10375): pid=23113 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043920.272:10376): pid=23103 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043920.272:10377): pid=23103 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043920.273:10378): pid=23103 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043920.274:10379): pid=23103 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043920.274:10380): pid=23103 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043920.274:10381): pid=23103 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043920.274:10382): pid=23103 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043920.274:10383): pid=23103 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23103 suid=0 rport=57562 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043923.322:10384): pid=23150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043923.323:10385): pid=23150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043923.323:10386): pid=23150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043923.326:10387): pid=23149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23150 suid=74 rport=57566 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043923.326:10388): pid=23149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23150 suid=74 rport=57566 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043923.424:10389): pid=23149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57566 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043923.424:10390): pid=23149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57566 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043923.434:10391): pid=23149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043923.436:10392): pid=23149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23150 suid=74 rport=57566 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043923.437:10393): pid=23149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043923.437:10394): pid=23149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043923.437:10395): pid=23149 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=222 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043923.667:10396): pid=23149 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043923.701:10397): pid=23149 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043923.745:10398): pid=23149 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043923.745:10399): pid=23149 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043923.747:10400): pid=23152 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043923.747:10401): pid=23152 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043923.747:10402): pid=23152 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043923.749:10403): pid=23152 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043923.782:10404): pid=23149 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043923.782:10405): pid=23149 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043923.783:10406): pid=23149 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043923.783:10407): pid=23149 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043923.784:10408): pid=23149 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043923.784:10409): pid=23149 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043923.784:10410): pid=23149 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043923.784:10411): pid=23149 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23149 suid=0 rport=57566 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043925.317:10412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043925.317:10413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043925.320:10414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043925.336:10415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043926.833:10416): pid=23180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23180 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043926.833:10417): pid=23180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23180 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043926.833:10418): pid=23180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23180 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043926.835:10419): pid=23179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23180 suid=74 rport=57570 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043926.836:10420): pid=23179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23180 suid=74 rport=57570 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043926.935:10421): pid=23179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57570 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043926.935:10422): pid=23179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57570 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043926.944:10423): pid=23179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043926.945:10424): pid=23179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23180 suid=74 rport=57570 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043926.946:10425): pid=23179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043926.947:10426): pid=23179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043926.947:10427): pid=23179 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=223 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043927.181:10428): pid=23179 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043927.211:10429): pid=23179 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043927.254:10430): pid=23179 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043927.254:10431): pid=23179 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043927.256:10432): pid=23186 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23186 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043927.256:10433): pid=23186 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23186 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043927.256:10434): pid=23186 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23186 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043927.257:10435): pid=23186 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043927.289:10436): pid=23179 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043927.289:10437): pid=23179 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043927.290:10438): pid=23179 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043927.291:10439): pid=23179 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043927.291:10440): pid=23179 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043927.291:10441): pid=23179 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043927.291:10442): pid=23179 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043927.291:10443): pid=23179 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23179 suid=0 rport=57570 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043930.338:10444): pid=23212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043930.338:10445): pid=23212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043930.338:10446): pid=23212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043930.341:10447): pid=23210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23212 suid=74 rport=57588 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043930.341:10448): pid=23210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23212 suid=74 rport=57588 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043930.438:10449): pid=23210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=57588 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043930.438:10450): pid=23210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=57588 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043930.446:10451): pid=23210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043930.447:10452): pid=23210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23212 suid=74 rport=57588 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043930.449:10453): pid=23210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043930.450:10454): pid=23210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043930.450:10455): pid=23210 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=224 res=1 >type=SERVICE_START msg=audit(1538043930.569:10456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043930.569:10457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043930.573:10458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043930.599:10459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538043930.686:10460): pid=23210 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043930.715:10461): pid=23210 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043930.759:10462): pid=23210 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043930.759:10463): pid=23210 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043930.761:10464): pid=23217 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23217 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043930.761:10465): pid=23217 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23217 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043930.762:10466): pid=23217 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23217 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043930.763:10467): pid=23217 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043930.798:10468): pid=23210 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043930.799:10469): pid=23210 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043930.799:10470): pid=23210 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043930.800:10471): pid=23210 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043930.800:10472): pid=23210 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043930.800:10473): pid=23210 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043930.800:10474): pid=23210 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043930.800:10475): pid=23210 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23210 suid=0 rport=57588 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043933.836:10476): pid=23254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043933.836:10477): pid=23254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043933.836:10478): pid=23254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043933.838:10479): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23254 suid=74 rport=58494 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043933.838:10480): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23254 suid=74 rport=58494 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043933.895:10481): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58494 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043933.895:10482): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58494 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043933.903:10483): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043933.904:10484): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23254 suid=74 rport=58494 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043933.906:10485): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043933.906:10486): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043933.906:10487): pid=23253 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=225 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043934.167:10488): pid=23253 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043934.190:10489): pid=23253 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043934.233:10490): pid=23253 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043934.233:10491): pid=23253 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043934.236:10492): pid=23261 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043934.236:10493): pid=23261 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043934.236:10494): pid=23261 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043934.238:10495): pid=23261 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043934.271:10496): pid=23253 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043934.271:10497): pid=23253 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043934.272:10498): pid=23253 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043934.272:10499): pid=23253 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043934.272:10500): pid=23253 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043934.272:10501): pid=23253 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043934.273:10502): pid=23253 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043934.273:10503): pid=23253 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23253 suid=0 rport=58494 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043935.817:10504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043935.817:10505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043935.819:10506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043935.832:10507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043937.312:10508): pid=23298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043937.312:10509): pid=23298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043937.312:10510): pid=23298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043937.315:10511): pid=23297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23298 suid=74 rport=58612 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043937.315:10512): pid=23297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23298 suid=74 rport=58612 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043937.386:10513): pid=23297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58612 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043937.386:10514): pid=23297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58612 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043937.396:10515): pid=23297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043937.396:10516): pid=23297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23298 suid=74 rport=58612 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043937.397:10517): pid=23297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043937.398:10518): pid=23297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043937.398:10519): pid=23297 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=226 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043937.632:10520): pid=23297 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043937.662:10521): pid=23297 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043937.706:10522): pid=23297 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043937.706:10523): pid=23297 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043937.707:10524): pid=23311 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043937.707:10525): pid=23311 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043937.707:10526): pid=23311 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043937.709:10527): pid=23311 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043937.741:10528): pid=23297 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043937.741:10529): pid=23297 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043937.742:10530): pid=23297 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043937.742:10531): pid=23297 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043937.742:10532): pid=23297 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043937.742:10533): pid=23297 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043937.742:10534): pid=23297 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043937.743:10535): pid=23297 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23297 suid=0 rport=58612 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043940.780:10536): pid=23339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043940.781:10537): pid=23339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043940.781:10538): pid=23339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043940.785:10539): pid=23338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23339 suid=74 rport=58616 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043940.785:10540): pid=23338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23339 suid=74 rport=58616 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043940.841:10541): pid=23338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58616 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043940.841:10542): pid=23338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58616 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043940.852:10543): pid=23338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043940.852:10544): pid=23338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23339 suid=74 rport=58616 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043940.855:10545): pid=23338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043940.855:10546): pid=23338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043940.855:10547): pid=23338 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=227 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043941.013:10548): pid=23338 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043941.020:10549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043941.020:10550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043941.022:10551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043941.032:10552): pid=23338 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_STOP msg=audit(1538043941.048:10553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_LOGIN msg=audit(1538043941.074:10554): pid=23338 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043941.074:10555): pid=23338 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043941.077:10556): pid=23344 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043941.078:10557): pid=23344 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043941.078:10558): pid=23344 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043941.080:10559): pid=23344 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043941.108:10560): pid=23338 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043941.108:10561): pid=23338 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043941.109:10562): pid=23338 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043941.109:10563): pid=23338 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043941.109:10564): pid=23338 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043941.109:10565): pid=23338 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043941.109:10566): pid=23338 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043941.109:10567): pid=23338 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23338 suid=0 rport=58616 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043944.155:10568): pid=23379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043944.156:10569): pid=23379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043944.156:10570): pid=23379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043944.158:10571): pid=23378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23379 suid=74 rport=58622 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043944.158:10572): pid=23378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23379 suid=74 rport=58622 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043944.238:10573): pid=23378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58622 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043944.238:10574): pid=23378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58622 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043944.248:10575): pid=23378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043944.249:10576): pid=23378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23379 suid=74 rport=58622 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043944.250:10577): pid=23378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043944.251:10578): pid=23378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043944.251:10579): pid=23378 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=228 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043944.406:10580): pid=23378 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043944.426:10581): pid=23378 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043944.470:10582): pid=23378 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043944.470:10583): pid=23378 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043944.473:10584): pid=23385 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043944.474:10585): pid=23385 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043944.474:10586): pid=23385 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043944.475:10587): pid=23385 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043944.510:10588): pid=23378 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043944.511:10589): pid=23378 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043944.512:10590): pid=23378 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043944.512:10591): pid=23378 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043944.512:10592): pid=23378 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043944.512:10593): pid=23378 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043944.512:10594): pid=23378 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043944.512:10595): pid=23378 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23378 suid=0 rport=58622 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043946.068:10596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043946.068:10597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043946.070:10598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043946.085:10599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043947.552:10600): pid=23415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043947.553:10601): pid=23415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043947.553:10602): pid=23415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23415 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043947.555:10603): pid=23414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23415 suid=74 rport=58626 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043947.555:10604): pid=23414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23415 suid=74 rport=58626 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043947.610:10605): pid=23414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58626 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043947.610:10606): pid=23414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58626 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043947.618:10607): pid=23414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043947.619:10608): pid=23414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23415 suid=74 rport=58626 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043947.621:10609): pid=23414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043947.622:10610): pid=23414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043947.622:10611): pid=23414 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=229 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043947.858:10612): pid=23414 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043947.888:10613): pid=23414 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043947.930:10614): pid=23414 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043947.930:10615): pid=23414 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043947.933:10616): pid=23417 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043947.934:10617): pid=23417 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043947.934:10618): pid=23417 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043947.935:10619): pid=23417 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043947.968:10620): pid=23414 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043947.968:10621): pid=23414 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043947.968:10622): pid=23414 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043947.968:10623): pid=23414 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043947.968:10624): pid=23414 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043947.968:10625): pid=23414 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043947.968:10626): pid=23414 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043947.968:10627): pid=23414 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23414 suid=0 rport=58626 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043951.021:10628): pid=23445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23445 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043951.022:10629): pid=23445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23445 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043951.022:10630): pid=23445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23445 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043951.025:10631): pid=23444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23445 suid=74 rport=58632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043951.025:10632): pid=23444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23445 suid=74 rport=58632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043951.107:10633): pid=23444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043951.107:10634): pid=23444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043951.116:10635): pid=23444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043951.117:10636): pid=23444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23445 suid=74 rport=58632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043951.119:10637): pid=23444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043951.120:10638): pid=23444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043951.120:10639): pid=23444 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=230 res=1 >type=SERVICE_START msg=audit(1538043951.320:10640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043951.320:10641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043951.323:10642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043951.350:10643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538043951.364:10644): pid=23444 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043951.391:10645): pid=23444 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043951.434:10646): pid=23444 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043951.434:10647): pid=23444 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043951.438:10648): pid=23459 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043951.438:10649): pid=23459 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043951.438:10650): pid=23459 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043951.440:10651): pid=23459 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043951.472:10652): pid=23444 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043951.473:10653): pid=23444 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043951.474:10654): pid=23444 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043951.474:10655): pid=23444 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043951.474:10656): pid=23444 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23444 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043951.474:10657): pid=23444 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23444 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043951.474:10658): pid=23444 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23444 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043951.474:10659): pid=23444 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23444 suid=0 rport=58632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043954.511:10660): pid=23519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043954.511:10661): pid=23519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043954.511:10662): pid=23519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043954.513:10663): pid=23518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23519 suid=74 rport=58636 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043954.513:10664): pid=23518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23519 suid=74 rport=58636 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043954.579:10665): pid=23518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58636 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043954.579:10666): pid=23518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58636 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043954.586:10667): pid=23518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043954.587:10668): pid=23518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23519 suid=74 rport=58636 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043954.589:10669): pid=23518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043954.589:10670): pid=23518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043954.590:10671): pid=23518 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=231 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043954.838:10672): pid=23518 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043954.857:10673): pid=23518 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043954.900:10674): pid=23518 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043954.900:10675): pid=23518 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043954.902:10676): pid=23526 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043954.902:10677): pid=23526 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043954.902:10678): pid=23526 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043954.903:10679): pid=23526 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043954.924:10680): pid=23518 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043954.925:10681): pid=23518 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043954.925:10682): pid=23518 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043954.925:10683): pid=23518 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043954.925:10684): pid=23518 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043954.925:10685): pid=23518 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043954.925:10686): pid=23518 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043954.925:10687): pid=23518 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23518 suid=0 rport=58636 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043956.567:10688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043956.568:10689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043956.569:10690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043956.585:10691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043957.964:10692): pid=23563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043957.964:10693): pid=23563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043957.964:10694): pid=23563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043957.967:10695): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23563 suid=74 rport=58642 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043957.967:10696): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23563 suid=74 rport=58642 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043958.024:10697): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58642 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043958.024:10698): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58642 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043958.032:10699): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043958.033:10700): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23563 suid=74 rport=58642 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043958.034:10701): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043958.034:10702): pid=23562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043958.035:10703): pid=23562 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=232 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043958.184:10704): pid=23562 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043958.202:10705): pid=23562 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043958.245:10706): pid=23562 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043958.245:10707): pid=23562 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043958.248:10708): pid=23565 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043958.249:10709): pid=23565 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043958.249:10710): pid=23565 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043958.251:10711): pid=23565 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043958.279:10712): pid=23562 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043958.279:10713): pid=23562 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043958.279:10714): pid=23562 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043958.279:10715): pid=23562 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043958.279:10716): pid=23562 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043958.279:10717): pid=23562 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043958.279:10718): pid=23562 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043958.279:10719): pid=23562 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23562 suid=0 rport=58642 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043961.311:10720): pid=23602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043961.311:10721): pid=23602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043961.311:10722): pid=23602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043961.314:10723): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23602 suid=74 rport=58648 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043961.314:10724): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23602 suid=74 rport=58648 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043961.337:10725): pid=23603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538043961.337:10726): pid=23603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538043961.338:10727): pid=23603 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=233 res=1 >type=USER_START msg=audit(1538043961.361:10728): pid=23603 uid=0 auid=163 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538043961.361:10729): pid=23603 uid=0 auid=163 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_AUTH msg=audit(1538043961.370:10730): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58648 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043961.370:10731): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58648 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043961.375:10732): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043961.375:10733): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23602 suid=74 rport=58648 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043961.376:10734): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043961.377:10735): pid=23601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043961.377:10736): pid=23601 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=234 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043961.543:10737): pid=23601 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043961.562:10738): pid=23601 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043961.604:10739): pid=23601 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043961.605:10740): pid=23601 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043961.607:10741): pid=23614 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043961.607:10742): pid=23614 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043961.607:10743): pid=23614 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043961.608:10744): pid=23614 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043961.629:10745): pid=23601 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043961.629:10746): pid=23601 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043961.630:10747): pid=23601 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043961.630:10748): pid=23601 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043961.630:10749): pid=23601 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043961.630:10750): pid=23601 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043961.630:10751): pid=23601 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043961.630:10752): pid=23601 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23601 suid=0 rport=58648 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043961.638:10753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043961.638:10754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043961.639:10755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043961.650:10756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRED_DISP msg=audit(1538043962.953:10757): pid=23603 uid=0 auid=163 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538043962.958:10758): pid=23603 uid=0 auid=163 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538043964.663:10759): pid=23666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043964.663:10760): pid=23666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043964.663:10761): pid=23666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043964.666:10762): pid=23665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23666 suid=74 rport=58656 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043964.666:10763): pid=23665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23666 suid=74 rport=58656 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043964.741:10764): pid=23665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043964.741:10765): pid=23665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043964.750:10766): pid=23665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043964.751:10767): pid=23665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23666 suid=74 rport=58656 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043964.753:10768): pid=23665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043964.753:10769): pid=23665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043964.754:10770): pid=23665 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=235 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043964.990:10771): pid=23665 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043965.023:10772): pid=23665 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043965.066:10773): pid=23665 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043965.066:10774): pid=23665 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043965.069:10775): pid=23669 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043965.070:10776): pid=23669 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043965.070:10777): pid=23669 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043965.071:10778): pid=23669 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043965.106:10779): pid=23665 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043965.106:10780): pid=23665 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043965.107:10781): pid=23665 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043965.107:10782): pid=23665 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043965.108:10783): pid=23665 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23665 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043965.108:10784): pid=23665 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23665 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043965.108:10785): pid=23665 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23665 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043965.108:10786): pid=23665 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23665 suid=0 rport=58656 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043965.680:10787): pid=23677 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043965.681:10788): pid=23677 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043965.682:10789): pid=23677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043965.706:10790): pid=23677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043966.160:10791): pid=23677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043966.161:10792): pid=23677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043966.310:10793): pid=23696 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043966.311:10794): pid=23696 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043966.311:10795): pid=23696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043966.326:10796): pid=23696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043966.817:10797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043966.817:10798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043966.820:10799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043966.840:10800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538043966.854:10801): pid=23696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043966.854:10802): pid=23696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043967.014:10803): pid=23707 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043967.014:10804): pid=23707 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538043967.014:10805): pid=23707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043967.032:10806): pid=23707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043967.552:10807): pid=23707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043967.552:10808): pid=23707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538043967.683:10809): pid=23720 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538043967.683:10810): pid=23720 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538043967.684:10811): pid=23720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043967.700:10812): pid=23720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538043968.129:10813): pid=23720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538043968.129:10814): pid=23720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043968.149:10815): pid=23742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043968.150:10816): pid=23742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043968.150:10817): pid=23742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043968.152:10818): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23742 suid=74 rport=58662 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043968.152:10819): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23742 suid=74 rport=58662 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043968.249:10820): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58662 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043968.249:10821): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58662 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043968.257:10822): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043968.258:10823): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23742 suid=74 rport=58662 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043968.260:10824): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043968.261:10825): pid=23740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043968.261:10826): pid=23740 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=236 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043968.432:10827): pid=23740 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043968.466:10828): pid=23740 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043968.510:10829): pid=23740 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043968.510:10830): pid=23740 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043968.513:10831): pid=23745 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043968.514:10832): pid=23745 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043968.514:10833): pid=23745 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043968.515:10834): pid=23745 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043968.550:10835): pid=23740 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043968.550:10836): pid=23740 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043968.551:10837): pid=23740 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043968.551:10838): pid=23740 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043968.551:10839): pid=23740 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043968.551:10840): pid=23740 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043968.552:10841): pid=23740 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043968.552:10842): pid=23740 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23740 suid=0 rport=58662 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043971.584:10843): pid=23777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043971.584:10844): pid=23777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043971.584:10845): pid=23777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23777 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043971.586:10846): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23777 suid=74 rport=58668 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043971.586:10847): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23777 suid=74 rport=58668 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043971.648:10848): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58668 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043971.648:10849): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58668 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043971.655:10850): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043971.656:10851): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23777 suid=74 rport=58668 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043971.657:10852): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043971.657:10853): pid=23776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043971.657:10854): pid=23776 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=237 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043971.813:10855): pid=23776 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043971.838:10856): pid=23776 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043971.881:10857): pid=23776 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043971.881:10858): pid=23776 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043971.882:10859): pid=23786 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043971.882:10860): pid=23786 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043971.882:10861): pid=23786 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23786 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043971.883:10862): pid=23786 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043971.906:10863): pid=23776 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043971.907:10864): pid=23776 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043971.908:10865): pid=23776 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043971.908:10866): pid=23776 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043971.908:10867): pid=23776 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043971.908:10868): pid=23776 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043971.908:10869): pid=23776 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23776 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043971.909:10870): pid=23776 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23776 suid=0 rport=58668 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043971.917:10871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043971.917:10872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043971.918:10873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043971.934:10874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043974.951:10875): pid=23829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043974.951:10876): pid=23829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043974.951:10877): pid=23829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043974.954:10878): pid=23828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23829 suid=74 rport=58676 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043974.954:10879): pid=23828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23829 suid=74 rport=58676 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043975.012:10880): pid=23828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58676 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043975.012:10881): pid=23828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58676 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043975.020:10882): pid=23828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043975.021:10883): pid=23828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23829 suid=74 rport=58676 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043975.023:10884): pid=23828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043975.023:10885): pid=23828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043975.024:10886): pid=23828 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=238 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043975.185:10887): pid=23828 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043975.216:10888): pid=23828 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043975.258:10889): pid=23828 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043975.258:10890): pid=23828 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043975.261:10891): pid=23831 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043975.261:10892): pid=23831 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043975.261:10893): pid=23831 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23831 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043975.263:10894): pid=23831 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043975.297:10895): pid=23828 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043975.297:10896): pid=23828 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043975.298:10897): pid=23828 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043975.298:10898): pid=23828 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043975.298:10899): pid=23828 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043975.299:10900): pid=23828 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043975.299:10901): pid=23828 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23828 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043975.299:10902): pid=23828 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23828 suid=0 rport=58676 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043977.067:10903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043977.067:10904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043977.069:10905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043977.085:10906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043978.346:10907): pid=23883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23883 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043978.347:10908): pid=23883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23883 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043978.347:10909): pid=23883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23883 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043978.350:10910): pid=23882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23883 suid=74 rport=58684 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043978.350:10911): pid=23882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23883 suid=74 rport=58684 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043978.416:10912): pid=23882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58684 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043978.417:10913): pid=23882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58684 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043978.424:10914): pid=23882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043978.425:10915): pid=23882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23883 suid=74 rport=58684 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043978.426:10916): pid=23882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043978.426:10917): pid=23882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043978.426:10918): pid=23882 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=239 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043978.587:10919): pid=23882 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043978.617:10920): pid=23882 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043978.659:10921): pid=23882 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043978.659:10922): pid=23882 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043978.660:10923): pid=23895 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043978.660:10924): pid=23895 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043978.660:10925): pid=23895 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043978.661:10926): pid=23895 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043978.697:10927): pid=23882 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043978.697:10928): pid=23882 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043978.698:10929): pid=23882 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043978.698:10930): pid=23882 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043978.698:10931): pid=23882 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043978.698:10932): pid=23882 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043978.698:10933): pid=23882 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043978.698:10934): pid=23882 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23882 suid=0 rport=58684 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043981.739:10935): pid=23923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043981.739:10936): pid=23923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043981.739:10937): pid=23923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043981.742:10938): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23923 suid=74 rport=58690 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043981.742:10939): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23923 suid=74 rport=58690 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043981.842:10940): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58690 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043981.842:10941): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58690 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043981.850:10942): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043981.851:10943): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23923 suid=74 rport=58690 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043981.853:10944): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043981.854:10945): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043981.854:10946): pid=23922 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=240 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043982.082:10947): pid=23922 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043982.091:10948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043982.091:10949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043982.095:10950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043982.122:10951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538043982.130:10952): pid=23922 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043982.174:10953): pid=23922 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043982.174:10954): pid=23922 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043982.175:10955): pid=23937 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043982.175:10956): pid=23937 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043982.176:10957): pid=23937 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043982.177:10958): pid=23937 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043982.205:10959): pid=23922 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043982.205:10960): pid=23922 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043982.206:10961): pid=23922 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043982.206:10962): pid=23922 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043982.206:10963): pid=23922 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043982.206:10964): pid=23922 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043982.207:10965): pid=23922 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043982.207:10966): pid=23922 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23922 suid=0 rport=58690 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043985.250:10967): pid=23969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043985.251:10968): pid=23969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043985.251:10969): pid=23969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043985.254:10970): pid=23968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23969 suid=74 rport=58696 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043985.254:10971): pid=23968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=23969 suid=74 rport=58696 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043985.357:10972): pid=23968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58696 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043985.357:10973): pid=23968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58696 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043985.367:10974): pid=23968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043985.368:10975): pid=23968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23969 suid=74 rport=58696 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043985.370:10976): pid=23968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043985.370:10977): pid=23968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043985.370:10978): pid=23968 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=241 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043985.529:10979): pid=23968 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043985.549:10980): pid=23968 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043985.593:10981): pid=23968 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043985.593:10982): pid=23968 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043985.594:10983): pid=23980 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043985.594:10984): pid=23980 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043985.594:10985): pid=23980 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043985.595:10986): pid=23980 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043985.628:10987): pid=23968 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043985.628:10988): pid=23968 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043985.629:10989): pid=23968 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043985.630:10990): pid=23968 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043985.630:10991): pid=23968 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=23968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043985.631:10992): pid=23968 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=23968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043985.631:10993): pid=23968 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=23968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043985.631:10994): pid=23968 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23968 suid=0 rport=58696 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043987.317:10995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043987.317:10996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043987.319:10997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043987.339:10998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538043988.674:10999): pid=24013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043988.675:11000): pid=24013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043988.675:11001): pid=24013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043988.679:11002): pid=24012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24013 suid=74 rport=58702 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043988.679:11003): pid=24012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24013 suid=74 rport=58702 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043988.778:11004): pid=24012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=58702 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043988.778:11005): pid=24012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=58702 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043988.788:11006): pid=24012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043988.788:11007): pid=24012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24013 suid=74 rport=58702 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043988.790:11008): pid=24012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043988.790:11009): pid=24012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043988.790:11010): pid=24012 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=242 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043988.944:11011): pid=24012 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043988.977:11012): pid=24012 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043989.020:11013): pid=24012 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043989.021:11014): pid=24012 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043989.022:11015): pid=24024 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043989.022:11016): pid=24024 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043989.022:11017): pid=24024 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043989.023:11018): pid=24024 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043989.050:11019): pid=24012 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043989.050:11020): pid=24012 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043989.051:11021): pid=24012 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043989.051:11022): pid=24012 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043989.051:11023): pid=24012 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043989.051:11024): pid=24012 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043989.051:11025): pid=24012 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043989.051:11026): pid=24012 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24012 suid=0 rport=58702 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043992.093:11027): pid=24064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043992.093:11028): pid=24064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043992.093:11029): pid=24064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043992.095:11030): pid=24063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24064 suid=74 rport=59086 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043992.095:11031): pid=24063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24064 suid=74 rport=59086 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043992.153:11032): pid=24063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59086 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043992.153:11033): pid=24063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59086 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043992.161:11034): pid=24063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043992.161:11035): pid=24063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24064 suid=74 rport=59086 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043992.163:11036): pid=24063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043992.163:11037): pid=24063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043992.163:11038): pid=24063 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=243 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043992.345:11039): pid=24063 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538043992.354:11040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538043992.354:11041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043992.356:11042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538043992.369:11043): pid=24063 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_STOP msg=audit(1538043992.380:11044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_LOGIN msg=audit(1538043992.412:11045): pid=24063 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043992.413:11046): pid=24063 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043992.415:11047): pid=24070 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043992.415:11048): pid=24070 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043992.415:11049): pid=24070 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043992.417:11050): pid=24070 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043992.444:11051): pid=24063 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043992.444:11052): pid=24063 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043992.445:11053): pid=24063 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043992.445:11054): pid=24063 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043992.445:11055): pid=24063 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043992.445:11056): pid=24063 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043992.445:11057): pid=24063 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043992.445:11058): pid=24063 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24063 suid=0 rport=59086 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538043993.631:11059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-glance-api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538043995.235:11060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-glance-registry comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043995.503:11061): pid=24227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043995.503:11062): pid=24227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043995.503:11063): pid=24227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043995.506:11064): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24227 suid=74 rport=59738 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043995.506:11065): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24227 suid=74 rport=59738 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043995.568:11066): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59738 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043995.569:11067): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59738 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043995.579:11068): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043995.581:11069): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24227 suid=74 rport=59738 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043995.583:11070): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043995.583:11071): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043995.583:11072): pid=24223 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=244 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043995.819:11073): pid=24223 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043995.849:11074): pid=24223 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043995.894:11075): pid=24223 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043995.894:11076): pid=24223 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043995.895:11077): pid=24260 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043995.895:11078): pid=24260 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043995.895:11079): pid=24260 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043995.897:11080): pid=24260 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043995.933:11081): pid=24223 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043995.933:11082): pid=24223 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043995.934:11083): pid=24223 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043995.934:11084): pid=24223 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043995.934:11085): pid=24223 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043995.934:11086): pid=24223 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043995.934:11087): pid=24223 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043995.934:11088): pid=24223 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24223 suid=0 rport=59738 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043998.972:11089): pid=24298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043998.972:11090): pid=24298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043998.972:11091): pid=24298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043998.975:11092): pid=24297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24298 suid=74 rport=59742 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538043998.975:11093): pid=24297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24298 suid=74 rport=59742 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043999.077:11094): pid=24297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59742 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043999.077:11095): pid=24297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59742 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538043999.086:11096): pid=24297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043999.087:11097): pid=24297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24298 suid=74 rport=59742 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538043999.088:11098): pid=24297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538043999.089:11099): pid=24297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538043999.089:11100): pid=24297 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=245 res=1 >type=USER_ROLE_CHANGE msg=audit(1538043999.326:11101): pid=24297 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043999.349:11102): pid=24297 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538043999.393:11103): pid=24297 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538043999.393:11104): pid=24297 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043999.396:11105): pid=24301 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24301 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043999.396:11106): pid=24301 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24301 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043999.396:11107): pid=24301 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24301 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538043999.398:11108): pid=24301 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043999.435:11109): pid=24297 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538043999.435:11110): pid=24297 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538043999.435:11111): pid=24297 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538043999.435:11112): pid=24297 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538043999.436:11113): pid=24297 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043999.436:11114): pid=24297 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043999.436:11115): pid=24297 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538043999.436:11116): pid=24297 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24297 suid=0 rport=59742 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044000.818:11117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044000.818:11118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044000.819:11119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044000.989:11120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044002.469:11121): pid=24340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044002.469:11122): pid=24340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044002.469:11123): pid=24340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044002.471:11124): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24340 suid=74 rport=59748 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044002.471:11125): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24340 suid=74 rport=59748 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044002.528:11126): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59748 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044002.528:11127): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59748 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044002.536:11128): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044002.537:11129): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24340 suid=74 rport=59748 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044002.538:11130): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044002.538:11131): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044002.539:11132): pid=24339 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=246 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044002.698:11133): pid=24339 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044002.718:11134): pid=24339 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044002.762:11135): pid=24339 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044002.762:11136): pid=24339 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044002.765:11137): pid=24344 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044002.766:11138): pid=24344 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044002.766:11139): pid=24344 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24344 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044002.768:11140): pid=24344 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044002.792:11141): pid=24339 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044002.792:11142): pid=24339 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044002.793:11143): pid=24339 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044002.793:11144): pid=24339 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044002.794:11145): pid=24339 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044002.794:11146): pid=24339 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044002.794:11147): pid=24339 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044002.794:11148): pid=24339 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24339 suid=0 rport=59748 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044005.816:11149): pid=24397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044005.816:11150): pid=24397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044005.816:11151): pid=24397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24397 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044005.818:11152): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24397 suid=74 rport=59756 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044005.818:11153): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24397 suid=74 rport=59756 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044005.873:11154): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59756 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044005.873:11155): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59756 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044005.880:11156): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044005.881:11157): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24397 suid=74 rport=59756 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044005.882:11158): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044005.882:11159): pid=24396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044005.882:11160): pid=24396 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=247 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044006.043:11161): pid=24396 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538044006.049:11162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044006.049:11163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044006.052:11164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044006.061:11165): pid=24396 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_STOP msg=audit(1538044006.071:11166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_LOGIN msg=audit(1538044006.104:11167): pid=24396 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044006.104:11168): pid=24396 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044006.106:11169): pid=24404 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044006.106:11170): pid=24404 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044006.106:11171): pid=24404 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044006.107:11172): pid=24404 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044006.127:11173): pid=24396 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044006.127:11174): pid=24396 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044006.127:11175): pid=24396 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044006.128:11176): pid=24396 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044006.128:11177): pid=24396 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044006.128:11178): pid=24396 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044006.128:11179): pid=24396 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24396 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044006.128:11180): pid=24396 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24396 suid=0 rport=59756 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044009.172:11181): pid=24450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044009.172:11182): pid=24450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044009.172:11183): pid=24450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044009.174:11184): pid=24449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24450 suid=74 rport=59764 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044009.174:11185): pid=24449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24450 suid=74 rport=59764 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044009.230:11186): pid=24449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59764 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044009.230:11187): pid=24449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59764 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044009.237:11188): pid=24449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044009.238:11189): pid=24449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24450 suid=74 rport=59764 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044009.240:11190): pid=24449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044009.240:11191): pid=24449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044009.240:11192): pid=24449 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=248 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044009.396:11193): pid=24449 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044009.414:11194): pid=24449 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044009.456:11195): pid=24449 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044009.456:11196): pid=24449 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044009.458:11197): pid=24457 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044009.458:11198): pid=24457 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044009.458:11199): pid=24457 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044009.459:11200): pid=24457 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044009.485:11201): pid=24449 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044009.486:11202): pid=24449 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044009.486:11203): pid=24449 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044009.486:11204): pid=24449 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044009.486:11205): pid=24449 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044009.486:11206): pid=24449 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044009.486:11207): pid=24449 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044009.486:11208): pid=24449 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24449 suid=0 rport=59764 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044011.318:11209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044011.318:11210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044011.321:11211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044011.334:11212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044012.516:11213): pid=24500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24500 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044012.516:11214): pid=24500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24500 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044012.516:11215): pid=24500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24500 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044012.518:11216): pid=24499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24500 suid=74 rport=59770 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044012.518:11217): pid=24499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24500 suid=74 rport=59770 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044012.585:11218): pid=24499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59770 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044012.585:11219): pid=24499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59770 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044012.594:11220): pid=24499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044012.595:11221): pid=24499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24500 suid=74 rport=59770 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044012.597:11222): pid=24499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044012.597:11223): pid=24499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044012.598:11224): pid=24499 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=249 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044012.757:11225): pid=24499 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044012.788:11226): pid=24499 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044012.833:11227): pid=24499 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044012.833:11228): pid=24499 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044012.835:11229): pid=24502 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044012.835:11230): pid=24502 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044012.835:11231): pid=24502 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044012.836:11232): pid=24502 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044012.870:11233): pid=24499 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044012.871:11234): pid=24499 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044012.872:11235): pid=24499 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044012.872:11236): pid=24499 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044012.872:11237): pid=24499 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044012.872:11238): pid=24499 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044012.872:11239): pid=24499 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044012.872:11240): pid=24499 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24499 suid=0 rport=59770 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044015.898:11241): pid=24574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044015.898:11242): pid=24574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044015.899:11243): pid=24574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044015.902:11244): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24574 suid=74 rport=59776 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044015.902:11245): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24574 suid=74 rport=59776 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044015.959:11246): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59776 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044015.959:11247): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59776 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044015.966:11248): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044015.967:11249): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24574 suid=74 rport=59776 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044015.968:11250): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044015.968:11251): pid=24573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044015.968:11252): pid=24573 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=250 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044016.190:11253): pid=24573 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044016.215:11254): pid=24573 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044016.257:11255): pid=24573 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044016.257:11256): pid=24573 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044016.260:11257): pid=24576 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044016.260:11258): pid=24576 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044016.260:11259): pid=24576 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044016.261:11260): pid=24576 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044016.292:11261): pid=24573 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044016.292:11262): pid=24573 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044016.293:11263): pid=24573 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044016.293:11264): pid=24573 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044016.293:11265): pid=24573 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044016.293:11266): pid=24573 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044016.293:11267): pid=24573 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044016.293:11268): pid=24573 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24573 suid=0 rport=59776 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044016.568:11269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044016.568:11270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044016.570:11271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044016.584:11272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044019.327:11273): pid=24618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044019.327:11274): pid=24618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044019.327:11275): pid=24618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044019.330:11276): pid=24617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24618 suid=74 rport=59782 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044019.330:11277): pid=24617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24618 suid=74 rport=59782 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044019.389:11278): pid=24617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59782 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044019.389:11279): pid=24617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59782 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044019.396:11280): pid=24617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044019.397:11281): pid=24617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24618 suid=74 rport=59782 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044019.399:11282): pid=24617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044019.399:11283): pid=24617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044019.400:11284): pid=24617 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=251 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044019.623:11285): pid=24617 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044019.644:11286): pid=24617 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044019.687:11287): pid=24617 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044019.687:11288): pid=24617 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044019.689:11289): pid=24620 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044019.689:11290): pid=24620 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044019.689:11291): pid=24620 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044019.690:11292): pid=24620 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044019.713:11293): pid=24617 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044019.713:11294): pid=24617 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044019.714:11295): pid=24617 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044019.714:11296): pid=24617 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044019.714:11297): pid=24617 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044019.714:11298): pid=24617 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044019.714:11299): pid=24617 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044019.714:11300): pid=24617 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24617 suid=0 rport=59782 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044021.817:11301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044021.817:11302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044021.819:11303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044021.837:11304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044021.979:11305): pid=24657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044021.979:11306): pid=24657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044021.980:11307): pid=24657 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=252 res=1 >type=USER_START msg=audit(1538044022.013:11308): pid=24657 uid=0 auid=163 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044022.013:11309): pid=24657 uid=0 auid=163 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538044022.767:11310): pid=24673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044022.768:11311): pid=24673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044022.768:11312): pid=24673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044022.770:11313): pid=24672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24673 suid=74 rport=59788 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044022.770:11314): pid=24672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24673 suid=74 rport=59788 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044022.828:11315): pid=24672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59788 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044022.828:11316): pid=24672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59788 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044022.834:11317): pid=24672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044022.835:11318): pid=24672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24673 suid=74 rport=59788 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044022.836:11319): pid=24672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044022.837:11320): pid=24672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044022.837:11321): pid=24672 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=253 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044023.035:11322): pid=24672 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044023.065:11323): pid=24672 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044023.108:11324): pid=24672 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044023.108:11325): pid=24672 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044023.111:11326): pid=24680 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044023.111:11327): pid=24680 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044023.111:11328): pid=24680 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044023.112:11329): pid=24680 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044023.150:11330): pid=24672 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044023.150:11331): pid=24672 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044023.151:11332): pid=24672 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044023.151:11333): pid=24672 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044023.151:11334): pid=24672 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044023.151:11335): pid=24672 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044023.151:11336): pid=24672 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044023.151:11337): pid=24672 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24672 suid=0 rport=59788 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRED_DISP msg=audit(1538044024.143:11338): pid=24657 uid=0 auid=163 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044024.152:11339): pid=24657 uid=0 auid=163 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1538044025.679:11340): pid=24706 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044025.680:11341): pid=24706 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044025.680:11342): pid=24706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044025.698:11343): pid=24706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044025.919:11344): pid=24706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044025.919:11345): pid=24706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044026.042:11346): pid=24718 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044026.042:11347): pid=24718 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044026.042:11348): pid=24718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044026.061:11349): pid=24718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044026.186:11350): pid=24731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044026.186:11351): pid=24731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044026.186:11352): pid=24731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044026.189:11353): pid=24730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24731 suid=74 rport=59796 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044026.189:11354): pid=24730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24731 suid=74 rport=59796 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044026.279:11355): pid=24730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044026.279:11356): pid=24730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59796 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044026.288:11357): pid=24730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044026.289:11358): pid=24730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24731 suid=74 rport=59796 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044026.291:11359): pid=24730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044026.292:11360): pid=24730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044026.292:11361): pid=24730 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=254 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044026.458:11362): pid=24730 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044026.477:11363): pid=24730 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044026.487:11364): pid=24718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044026.487:11365): pid=24718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538044026.520:11366): pid=24730 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044026.520:11367): pid=24730 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044026.522:11368): pid=24740 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044026.522:11369): pid=24740 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044026.522:11370): pid=24740 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044026.523:11371): pid=24740 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044026.550:11372): pid=24730 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044026.550:11373): pid=24730 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044026.551:11374): pid=24730 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044026.551:11375): pid=24730 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044026.551:11376): pid=24730 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044026.551:11377): pid=24730 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044026.551:11378): pid=24730 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044026.551:11379): pid=24730 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24730 suid=0 rport=59796 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044026.613:11380): pid=24739 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044026.614:11381): pid=24739 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044026.614:11382): pid=24739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044026.624:11383): pid=24739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044026.826:11384): pid=24739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044026.826:11385): pid=24739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044026.928:11386): pid=24751 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044026.929:11387): pid=24751 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044026.929:11388): pid=24751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044026.932:11389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044026.932:11390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044026.933:11391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044026.942:11392): pid=24751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044026.946:11393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044027.163:11394): pid=24751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044027.164:11395): pid=24751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044029.606:11396): pid=24792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044029.606:11397): pid=24792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044029.607:11398): pid=24792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044029.609:11399): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24792 suid=74 rport=59802 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044029.609:11400): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24792 suid=74 rport=59802 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044029.712:11401): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59802 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044029.712:11402): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59802 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044029.722:11403): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044029.722:11404): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24792 suid=74 rport=59802 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044029.724:11405): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044029.725:11406): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044029.725:11407): pid=24791 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=255 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044029.967:11408): pid=24791 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044029.996:11409): pid=24791 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044030.041:11410): pid=24791 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044030.041:11411): pid=24791 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044030.044:11412): pid=24795 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24795 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044030.044:11413): pid=24795 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24795 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044030.044:11414): pid=24795 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24795 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044030.046:11415): pid=24795 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044030.081:11416): pid=24791 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044030.081:11417): pid=24791 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044030.082:11418): pid=24791 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044030.083:11419): pid=24791 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044030.083:11420): pid=24791 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044030.083:11421): pid=24791 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044030.083:11422): pid=24791 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044030.083:11423): pid=24791 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24791 suid=0 rport=59802 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044032.068:11424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044032.068:11425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044032.072:11426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044032.091:11427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044033.137:11428): pid=24820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044033.138:11429): pid=24820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044033.138:11430): pid=24820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044033.140:11431): pid=24819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24820 suid=74 rport=59806 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044033.141:11432): pid=24819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24820 suid=74 rport=59806 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044033.223:11433): pid=24819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59806 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044033.223:11434): pid=24819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59806 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044033.233:11435): pid=24819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044033.234:11436): pid=24819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24820 suid=74 rport=59806 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044033.236:11437): pid=24819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044033.237:11438): pid=24819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044033.237:11439): pid=24819 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=256 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044033.481:11440): pid=24819 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044033.512:11441): pid=24819 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044033.556:11442): pid=24819 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044033.557:11443): pid=24819 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044033.560:11444): pid=24823 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24823 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044033.560:11445): pid=24823 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24823 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044033.560:11446): pid=24823 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24823 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044033.562:11447): pid=24823 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044033.597:11448): pid=24819 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044033.597:11449): pid=24819 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044033.598:11450): pid=24819 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044033.598:11451): pid=24819 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044033.598:11452): pid=24819 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044033.598:11453): pid=24819 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044033.598:11454): pid=24819 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044033.599:11455): pid=24819 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24819 suid=0 rport=59806 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044036.628:11456): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044036.628:11457): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044036.628:11458): pid=24837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044036.630:11459): pid=24836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24837 suid=74 rport=59816 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044036.631:11460): pid=24836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24837 suid=74 rport=59816 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044036.687:11461): pid=24836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59816 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044036.687:11462): pid=24836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59816 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044036.695:11463): pid=24836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044036.695:11464): pid=24836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24837 suid=74 rport=59816 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044036.697:11465): pid=24836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044036.698:11466): pid=24836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044036.698:11467): pid=24836 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044036.910:11468): pid=24836 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044036.940:11469): pid=24836 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044036.983:11470): pid=24836 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044036.983:11471): pid=24836 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044036.984:11472): pid=24848 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044036.984:11473): pid=24848 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044036.984:11474): pid=24848 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044036.985:11475): pid=24848 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044037.019:11476): pid=24836 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044037.019:11477): pid=24836 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044037.020:11478): pid=24836 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044037.020:11479): pid=24836 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044037.021:11480): pid=24836 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044037.021:11481): pid=24836 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044037.021:11482): pid=24836 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044037.021:11483): pid=24836 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24836 suid=0 rport=59816 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044037.317:11484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044037.317:11485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044037.319:11486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044037.334:11487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044040.073:11488): pid=24864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24864 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044040.073:11489): pid=24864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24864 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044040.073:11490): pid=24864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24864 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044040.076:11491): pid=24863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24864 suid=74 rport=59826 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044040.076:11492): pid=24863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24864 suid=74 rport=59826 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044040.176:11493): pid=24863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59826 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044040.176:11494): pid=24863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59826 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044040.185:11495): pid=24863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044040.187:11496): pid=24863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24864 suid=74 rport=59826 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044040.189:11497): pid=24863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044040.189:11498): pid=24863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044040.189:11499): pid=24863 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044040.426:11500): pid=24863 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044040.455:11501): pid=24863 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044040.500:11502): pid=24863 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044040.500:11503): pid=24863 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044040.503:11504): pid=24867 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044040.503:11505): pid=24867 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044040.503:11506): pid=24867 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24867 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044040.505:11507): pid=24867 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044040.542:11508): pid=24863 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044040.542:11509): pid=24863 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044040.543:11510): pid=24863 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044040.543:11511): pid=24863 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044040.543:11512): pid=24863 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24863 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044040.543:11513): pid=24863 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24863 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044040.544:11514): pid=24863 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24863 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044040.544:11515): pid=24863 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24863 suid=0 rport=59826 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044042.567:11516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044042.567:11517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044042.570:11518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044042.587:11519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044043.593:11520): pid=24897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044043.593:11521): pid=24897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044043.593:11522): pid=24897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24897 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044043.596:11523): pid=24896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24897 suid=74 rport=59832 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044043.596:11524): pid=24896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24897 suid=74 rport=59832 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044043.699:11525): pid=24896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59832 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044043.699:11526): pid=24896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59832 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044043.709:11527): pid=24896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044043.711:11528): pid=24896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24897 suid=74 rport=59832 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044043.713:11529): pid=24896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044043.713:11530): pid=24896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044043.714:11531): pid=24896 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=259 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044043.907:11532): pid=24896 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044043.938:11533): pid=24896 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044043.982:11534): pid=24896 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044043.982:11535): pid=24896 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044043.985:11536): pid=24900 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044043.985:11537): pid=24900 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044043.986:11538): pid=24900 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044043.987:11539): pid=24900 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044044.018:11540): pid=24896 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044044.019:11541): pid=24896 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044044.019:11542): pid=24896 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044044.019:11543): pid=24896 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044044.019:11544): pid=24896 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044044.019:11545): pid=24896 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044044.019:11546): pid=24896 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044044.019:11547): pid=24896 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24896 suid=0 rport=59832 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044047.070:11548): pid=24928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044047.070:11549): pid=24928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044047.071:11550): pid=24928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044047.073:11551): pid=24927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24928 suid=74 rport=59838 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044047.073:11552): pid=24927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24928 suid=74 rport=59838 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044047.173:11553): pid=24927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59838 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044047.173:11554): pid=24927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59838 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044047.182:11555): pid=24927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044047.183:11556): pid=24927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24928 suid=74 rport=59838 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044047.184:11557): pid=24927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044047.184:11558): pid=24927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044047.185:11559): pid=24927 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=260 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044047.343:11560): pid=24927 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044047.374:11561): pid=24927 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044047.418:11562): pid=24927 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044047.418:11563): pid=24927 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044047.419:11564): pid=24937 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044047.420:11565): pid=24937 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044047.420:11566): pid=24937 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24937 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044047.421:11567): pid=24937 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044047.454:11568): pid=24927 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044047.455:11569): pid=24927 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044047.455:11570): pid=24927 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044047.456:11571): pid=24927 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044047.456:11572): pid=24927 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24927 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044047.456:11573): pid=24927 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24927 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044047.456:11574): pid=24927 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24927 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044047.456:11575): pid=24927 uid=0 auid=0 ses=260 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24927 suid=0 rport=59838 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044047.817:11576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044047.817:11577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044047.819:11578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044047.835:11579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044050.501:11580): pid=24974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044050.501:11581): pid=24974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044050.501:11582): pid=24974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044050.505:11583): pid=24973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24974 suid=74 rport=59884 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044050.505:11584): pid=24973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=24974 suid=74 rport=59884 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044050.608:11585): pid=24973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=59884 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044050.608:11586): pid=24973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=59884 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044050.618:11587): pid=24973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044050.619:11588): pid=24973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24974 suid=74 rport=59884 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044050.621:11589): pid=24973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044050.622:11590): pid=24973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044050.622:11591): pid=24973 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=261 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044050.867:11592): pid=24973 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044050.896:11593): pid=24973 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044050.939:11594): pid=24973 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044050.939:11595): pid=24973 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044050.940:11596): pid=24983 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044050.940:11597): pid=24983 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044050.941:11598): pid=24983 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044050.942:11599): pid=24983 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044050.978:11600): pid=24973 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044050.979:11601): pid=24973 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044050.980:11602): pid=24973 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044050.980:11603): pid=24973 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044050.980:11604): pid=24973 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=24973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044050.980:11605): pid=24973 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=24973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044050.981:11606): pid=24973 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=24973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044050.981:11607): pid=24973 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24973 suid=0 rport=59884 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044053.068:11608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044053.068:11609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044053.070:11610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044053.090:11611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044054.027:11612): pid=25021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044054.027:11613): pid=25021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044054.027:11614): pid=25021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25021 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044054.030:11615): pid=25020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25021 suid=74 rport=60752 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044054.030:11616): pid=25020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25021 suid=74 rport=60752 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044054.110:11617): pid=25020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60752 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044054.110:11618): pid=25020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60752 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044054.118:11619): pid=25020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044054.119:11620): pid=25020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25021 suid=74 rport=60752 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044054.120:11621): pid=25020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044054.120:11622): pid=25020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044054.120:11623): pid=25020 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=262 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044054.382:11624): pid=25020 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044054.417:11625): pid=25020 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044054.460:11626): pid=25020 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044054.460:11627): pid=25020 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044054.461:11628): pid=25034 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044054.461:11629): pid=25034 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044054.461:11630): pid=25034 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25034 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044054.463:11631): pid=25034 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044054.495:11632): pid=25020 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044054.496:11633): pid=25020 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044054.497:11634): pid=25020 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044054.497:11635): pid=25020 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044054.497:11636): pid=25020 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044054.497:11637): pid=25020 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044054.497:11638): pid=25020 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25020 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044054.497:11639): pid=25020 uid=0 auid=0 ses=262 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25020 suid=0 rport=60752 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044057.538:11640): pid=25062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044057.539:11641): pid=25062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044057.539:11642): pid=25062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044057.541:11643): pid=25061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25062 suid=74 rport=60880 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044057.541:11644): pid=25061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25062 suid=74 rport=60880 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044057.643:11645): pid=25061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60880 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044057.643:11646): pid=25061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60880 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044057.652:11647): pid=25061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044057.653:11648): pid=25061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25062 suid=74 rport=60880 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044057.654:11649): pid=25061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044057.655:11650): pid=25061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044057.655:11651): pid=25061 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=263 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044057.891:11652): pid=25061 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044057.921:11653): pid=25061 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044057.966:11654): pid=25061 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044057.966:11655): pid=25061 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044057.968:11656): pid=25075 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044057.968:11657): pid=25075 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044057.969:11658): pid=25075 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044057.970:11659): pid=25075 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044058.003:11660): pid=25061 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044058.003:11661): pid=25061 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044058.004:11662): pid=25061 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044058.004:11663): pid=25061 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044058.005:11664): pid=25061 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044058.005:11665): pid=25061 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044058.005:11666): pid=25061 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25061 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044058.006:11667): pid=25061 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25061 suid=0 rport=60880 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044058.318:11668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044058.318:11669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044058.320:11670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044058.339:11671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044061.055:11672): pid=25107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044061.055:11673): pid=25107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044061.055:11674): pid=25107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044061.057:11675): pid=25106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25107 suid=74 rport=60886 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044061.057:11676): pid=25106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25107 suid=74 rport=60886 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044061.154:11677): pid=25106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60886 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044061.154:11678): pid=25106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60886 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044061.162:11679): pid=25106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044061.163:11680): pid=25106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25107 suid=74 rport=60886 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044061.165:11681): pid=25106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044061.165:11682): pid=25106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044061.165:11683): pid=25106 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=264 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044061.327:11684): pid=25106 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044061.350:11685): pid=25106 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044061.394:11686): pid=25106 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044061.394:11687): pid=25106 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044061.397:11688): pid=25110 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25110 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044061.398:11689): pid=25110 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25110 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044061.398:11690): pid=25110 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25110 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044061.399:11691): pid=25110 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044061.431:11692): pid=25106 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044061.431:11693): pid=25106 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044061.432:11694): pid=25106 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044061.432:11695): pid=25106 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044061.433:11696): pid=25106 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044061.433:11697): pid=25106 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044061.433:11698): pid=25106 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25106 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044061.433:11699): pid=25106 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25106 suid=0 rport=60886 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044063.568:11700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044063.568:11701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044063.569:11702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044063.587:11703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044064.474:11704): pid=25135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044064.474:11705): pid=25135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044064.474:11706): pid=25135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044064.477:11707): pid=25134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25135 suid=74 rport=60890 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044064.477:11708): pid=25134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25135 suid=74 rport=60890 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044064.534:11709): pid=25134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60890 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044064.534:11710): pid=25134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60890 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044064.544:11711): pid=25134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044064.545:11712): pid=25134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25135 suid=74 rport=60890 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044064.547:11713): pid=25134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044064.547:11714): pid=25134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044064.547:11715): pid=25134 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=265 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044064.709:11716): pid=25134 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044064.737:11717): pid=25134 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044064.782:11718): pid=25134 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044064.782:11719): pid=25134 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044064.785:11720): pid=25138 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044064.785:11721): pid=25138 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044064.785:11722): pid=25138 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044064.787:11723): pid=25138 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044064.823:11724): pid=25134 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044064.823:11725): pid=25134 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044064.824:11726): pid=25134 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044064.824:11727): pid=25134 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044064.824:11728): pid=25134 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044064.824:11729): pid=25134 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044064.824:11730): pid=25134 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044064.825:11731): pid=25134 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25134 suid=0 rport=60890 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044067.872:11732): pid=25162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044067.873:11733): pid=25162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044067.873:11734): pid=25162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044067.876:11735): pid=25161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25162 suid=74 rport=60898 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044067.876:11736): pid=25161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25162 suid=74 rport=60898 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044067.976:11737): pid=25161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60898 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044067.976:11738): pid=25161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60898 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044067.985:11739): pid=25161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044067.986:11740): pid=25161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25162 suid=74 rport=60898 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044067.988:11741): pid=25161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044067.988:11742): pid=25161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044067.988:11743): pid=25161 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=266 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044068.229:11744): pid=25161 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044068.260:11745): pid=25161 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044068.305:11746): pid=25161 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044068.305:11747): pid=25161 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044068.308:11748): pid=25165 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044068.308:11749): pid=25165 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044068.308:11750): pid=25165 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044068.310:11751): pid=25165 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044068.347:11752): pid=25161 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044068.347:11753): pid=25161 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044068.348:11754): pid=25161 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044068.348:11755): pid=25161 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044068.348:11756): pid=25161 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25161 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044068.349:11757): pid=25161 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25161 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044068.349:11758): pid=25161 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25161 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044068.349:11759): pid=25161 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25161 suid=0 rport=60898 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044068.817:11760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044068.817:11761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044068.820:11762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044068.835:11763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044071.400:11764): pid=25178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044071.400:11765): pid=25178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044071.400:11766): pid=25178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044071.403:11767): pid=25177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25178 suid=74 rport=60908 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044071.403:11768): pid=25177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25178 suid=74 rport=60908 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044071.458:11769): pid=25177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60908 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044071.458:11770): pid=25177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60908 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044071.466:11771): pid=25177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044071.467:11772): pid=25177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25178 suid=74 rport=60908 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044071.469:11773): pid=25177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044071.469:11774): pid=25177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044071.469:11775): pid=25177 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=267 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044071.709:11776): pid=25177 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044071.740:11777): pid=25177 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044071.783:11778): pid=25177 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044071.783:11779): pid=25177 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044071.787:11780): pid=25185 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044071.787:11781): pid=25185 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044071.787:11782): pid=25185 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044071.789:11783): pid=25185 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044071.825:11784): pid=25177 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044071.826:11785): pid=25177 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044071.827:11786): pid=25177 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044071.827:11787): pid=25177 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044071.827:11788): pid=25177 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044071.827:11789): pid=25177 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044071.827:11790): pid=25177 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25177 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044071.828:11791): pid=25177 uid=0 auid=0 ses=267 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25177 suid=0 rport=60908 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044074.068:11792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044074.068:11793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044074.070:11794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044074.086:11795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044074.879:11796): pid=25210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044074.880:11797): pid=25210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044074.880:11798): pid=25210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044074.882:11799): pid=25209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25210 suid=74 rport=60912 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044074.883:11800): pid=25209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25210 suid=74 rport=60912 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044074.984:11801): pid=25209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60912 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044074.985:11802): pid=25209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60912 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044074.994:11803): pid=25209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044074.995:11804): pid=25209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25210 suid=74 rport=60912 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044074.997:11805): pid=25209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044074.997:11806): pid=25209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044074.998:11807): pid=25209 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=268 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044075.238:11808): pid=25209 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044075.267:11809): pid=25209 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044075.311:11810): pid=25209 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044075.311:11811): pid=25209 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044075.314:11812): pid=25213 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044075.315:11813): pid=25213 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044075.315:11814): pid=25213 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044075.316:11815): pid=25213 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044075.346:11816): pid=25209 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044075.346:11817): pid=25209 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044075.347:11818): pid=25209 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044075.347:11819): pid=25209 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044075.348:11820): pid=25209 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25209 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044075.348:11821): pid=25209 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25209 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044075.348:11822): pid=25209 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25209 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044075.348:11823): pid=25209 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25209 suid=0 rport=60912 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044078.389:11824): pid=25269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044078.389:11825): pid=25269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044078.389:11826): pid=25269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044078.391:11827): pid=25268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25269 suid=74 rport=60920 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044078.391:11828): pid=25268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25269 suid=74 rport=60920 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044078.483:11829): pid=25268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60920 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044078.483:11830): pid=25268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60920 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044078.493:11831): pid=25268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044078.494:11832): pid=25268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25269 suid=74 rport=60920 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044078.498:11833): pid=25268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044078.498:11834): pid=25268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044078.498:11835): pid=25268 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=269 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044078.733:11836): pid=25268 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044078.762:11837): pid=25268 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044078.804:11838): pid=25268 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044078.805:11839): pid=25268 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044078.807:11840): pid=25272 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044078.807:11841): pid=25272 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044078.807:11842): pid=25272 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044078.809:11843): pid=25272 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044078.841:11844): pid=25268 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044078.841:11845): pid=25268 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044078.842:11846): pid=25268 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044078.842:11847): pid=25268 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044078.842:11848): pid=25268 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044078.843:11849): pid=25268 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044078.843:11850): pid=25268 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044078.843:11851): pid=25268 uid=0 auid=0 ses=269 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25268 suid=0 rport=60920 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044079.317:11852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044079.317:11853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044079.319:11854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044079.336:11855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044081.173:11856): pid=25293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044081.174:11857): pid=25293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044081.175:11858): pid=25293 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=270 res=1 >type=USER_START msg=audit(1538044081.214:11859): pid=25293 uid=0 auid=163 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044081.215:11860): pid=25293 uid=0 auid=163 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538044081.907:11861): pid=25307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25307 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044081.907:11862): pid=25307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25307 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044081.907:11863): pid=25307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25307 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044081.911:11864): pid=25306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25307 suid=74 rport=60926 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044081.911:11865): pid=25306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25307 suid=74 rport=60926 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044081.998:11866): pid=25306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60926 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044081.998:11867): pid=25306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60926 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044082.007:11868): pid=25306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044082.008:11869): pid=25306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25307 suid=74 rport=60926 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044082.010:11870): pid=25306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044082.010:11871): pid=25306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044082.010:11872): pid=25306 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=271 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044082.191:11873): pid=25306 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044082.221:11874): pid=25306 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044082.265:11875): pid=25306 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044082.265:11876): pid=25306 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044082.268:11877): pid=25312 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25312 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044082.269:11878): pid=25312 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25312 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044082.269:11879): pid=25312 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25312 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044082.270:11880): pid=25312 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044082.307:11881): pid=25306 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044082.307:11882): pid=25306 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044082.308:11883): pid=25306 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044082.308:11884): pid=25306 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044082.308:11885): pid=25306 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25306 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044082.308:11886): pid=25306 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25306 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044082.309:11887): pid=25306 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25306 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044082.309:11888): pid=25306 uid=0 auid=0 ses=271 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25306 suid=0 rport=60926 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRED_DISP msg=audit(1538044084.265:11889): pid=25293 uid=0 auid=163 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044084.271:11890): pid=25293 uid=0 auid=163 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538044084.568:11891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044084.568:11892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044084.570:11893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044084.593:11894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044085.361:11895): pid=25334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044085.362:11896): pid=25334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044085.362:11897): pid=25334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044085.364:11898): pid=25333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25334 suid=74 rport=60936 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044085.364:11899): pid=25333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25334 suid=74 rport=60936 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044085.431:11900): pid=25333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60936 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044085.432:11901): pid=25333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60936 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044085.440:11902): pid=25333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044085.441:11903): pid=25333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25334 suid=74 rport=60936 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044085.442:11904): pid=25333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044085.442:11905): pid=25333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044085.443:11906): pid=25333 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=272 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044085.607:11907): pid=25333 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044085.632:11908): pid=25333 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044085.677:11909): pid=25333 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044085.677:11910): pid=25333 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044085.680:11911): pid=25339 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044085.680:11912): pid=25339 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044085.680:11913): pid=25339 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044085.682:11914): pid=25339 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_ACCT msg=audit(1538044085.686:11915): pid=25336 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044085.687:11916): pid=25336 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044085.687:11917): pid=25336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044085.708:11918): pid=25336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044085.717:11919): pid=25333 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044085.717:11920): pid=25333 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044085.718:11921): pid=25333 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044085.718:11922): pid=25333 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044085.719:11923): pid=25333 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25333 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044085.719:11924): pid=25333 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25333 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044085.719:11925): pid=25333 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25333 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044085.719:11926): pid=25333 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25333 suid=0 rport=60936 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_END msg=audit(1538044086.072:11927): pid=25336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044086.072:11928): pid=25336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044086.179:11929): pid=25353 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044086.180:11930): pid=25353 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044086.180:11931): pid=25353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044086.202:11932): pid=25353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044086.681:11933): pid=25353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044086.681:11934): pid=25353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044086.807:11935): pid=25371 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044086.808:11936): pid=25371 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044086.808:11937): pid=25371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044086.817:11938): pid=25371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044087.341:11939): pid=25371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044087.341:11940): pid=25371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044087.502:11941): pid=25379 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044087.502:11942): pid=25379 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044087.503:11943): pid=25379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044087.519:11944): pid=25379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044087.948:11945): pid=25379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044087.948:11946): pid=25379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044088.753:11947): pid=25392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25392 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044088.753:11948): pid=25392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25392 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044088.753:11949): pid=25392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25392 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044088.755:11950): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25392 suid=74 rport=60942 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044088.755:11951): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25392 suid=74 rport=60942 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044088.811:11952): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60942 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044088.811:11953): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60942 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044088.818:11954): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044088.819:11955): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25392 suid=74 rport=60942 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044088.820:11956): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044088.820:11957): pid=25391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044088.821:11958): pid=25391 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=273 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044088.980:11959): pid=25391 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044088.999:11960): pid=25391 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044089.043:11961): pid=25391 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044089.043:11962): pid=25391 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044089.045:11963): pid=25395 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044089.045:11964): pid=25395 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044089.045:11965): pid=25395 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25395 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044089.046:11966): pid=25395 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044089.089:11967): pid=25391 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044089.090:11968): pid=25391 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044089.090:11969): pid=25391 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044089.091:11970): pid=25391 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044089.091:11971): pid=25391 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044089.091:11972): pid=25391 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044089.091:11973): pid=25391 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044089.091:11974): pid=25391 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25391 suid=0 rport=60942 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044089.817:11975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044089.817:11976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044089.820:11977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044089.836:11978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044092.144:11979): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044092.144:11980): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044092.145:11981): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044092.147:11982): pid=25422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25423 suid=74 rport=60950 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044092.147:11983): pid=25422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25423 suid=74 rport=60950 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044092.206:11984): pid=25422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60950 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044092.206:11985): pid=25422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60950 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044092.216:11986): pid=25422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044092.217:11987): pid=25422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25423 suid=74 rport=60950 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044092.218:11988): pid=25422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044092.219:11989): pid=25422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044092.219:11990): pid=25422 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=274 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044092.406:11991): pid=25422 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044092.436:11992): pid=25422 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044092.478:11993): pid=25422 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044092.479:11994): pid=25422 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044092.481:11995): pid=25426 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044092.481:11996): pid=25426 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044092.481:11997): pid=25426 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044092.483:11998): pid=25426 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044092.511:11999): pid=25422 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044092.512:12000): pid=25422 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044092.513:12001): pid=25422 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044092.513:12002): pid=25422 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044092.513:12003): pid=25422 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044092.513:12004): pid=25422 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044092.513:12005): pid=25422 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044092.513:12006): pid=25422 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25422 suid=0 rport=60950 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044095.067:12007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044095.068:12008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044095.071:12009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044095.086:12010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044095.560:12011): pid=25455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044095.560:12012): pid=25455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044095.560:12013): pid=25455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25455 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044095.563:12014): pid=25454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25455 suid=74 rport=60956 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044095.563:12015): pid=25454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25455 suid=74 rport=60956 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044095.664:12016): pid=25454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60956 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044095.664:12017): pid=25454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60956 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044095.674:12018): pid=25454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044095.675:12019): pid=25454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25455 suid=74 rport=60956 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044095.677:12020): pid=25454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044095.678:12021): pid=25454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044095.678:12022): pid=25454 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=275 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044095.926:12023): pid=25454 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044095.954:12024): pid=25454 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044095.997:12025): pid=25454 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044095.997:12026): pid=25454 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044096.000:12027): pid=25458 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044096.000:12028): pid=25458 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044096.000:12029): pid=25458 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044096.001:12030): pid=25458 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044096.035:12031): pid=25454 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044096.035:12032): pid=25454 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044096.036:12033): pid=25454 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044096.036:12034): pid=25454 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044096.037:12035): pid=25454 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044096.037:12036): pid=25454 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044096.037:12037): pid=25454 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044096.037:12038): pid=25454 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25454 suid=0 rport=60956 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044099.079:12039): pid=25482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044099.079:12040): pid=25482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044099.079:12041): pid=25482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044099.082:12042): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25482 suid=74 rport=60962 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044099.082:12043): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25482 suid=74 rport=60962 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044099.150:12044): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60962 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044099.150:12045): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60962 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044099.160:12046): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044099.161:12047): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25482 suid=74 rport=60962 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044099.162:12048): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044099.162:12049): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044099.162:12050): pid=25481 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=276 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044099.320:12051): pid=25481 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044099.339:12052): pid=25481 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044099.382:12053): pid=25481 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044099.382:12054): pid=25481 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044099.385:12055): pid=25485 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044099.385:12056): pid=25485 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044099.385:12057): pid=25485 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044099.386:12058): pid=25485 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044099.412:12059): pid=25481 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044099.412:12060): pid=25481 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044099.413:12061): pid=25481 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044099.413:12062): pid=25481 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044099.413:12063): pid=25481 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044099.414:12064): pid=25481 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044099.414:12065): pid=25481 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044099.414:12066): pid=25481 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25481 suid=0 rport=60962 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044100.317:12067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044100.317:12068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044100.320:12069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044100.333:12070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044102.458:12071): pid=25512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044102.458:12072): pid=25512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044102.458:12073): pid=25512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044102.461:12074): pid=25511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25512 suid=74 rport=60968 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044102.462:12075): pid=25511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25512 suid=74 rport=60968 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044102.563:12076): pid=25511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60968 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044102.563:12077): pid=25511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60968 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044102.571:12078): pid=25511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044102.572:12079): pid=25511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25512 suid=74 rport=60968 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044102.573:12080): pid=25511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044102.573:12081): pid=25511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044102.573:12082): pid=25511 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=277 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044102.746:12083): pid=25511 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044102.775:12084): pid=25511 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044102.820:12085): pid=25511 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044102.820:12086): pid=25511 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044102.823:12087): pid=25515 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044102.823:12088): pid=25515 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044102.823:12089): pid=25515 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044102.825:12090): pid=25515 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044102.864:12091): pid=25511 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044102.864:12092): pid=25511 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044102.865:12093): pid=25511 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044102.866:12094): pid=25511 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044102.866:12095): pid=25511 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044102.866:12096): pid=25511 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044102.866:12097): pid=25511 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044102.866:12098): pid=25511 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25511 suid=0 rport=60968 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044105.568:12099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044105.568:12100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044105.569:12101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044105.586:12102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044105.919:12103): pid=25544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044105.920:12104): pid=25544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044105.920:12105): pid=25544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044105.923:12106): pid=25543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25544 suid=74 rport=60978 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044105.923:12107): pid=25543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25544 suid=74 rport=60978 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044106.027:12108): pid=25543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60978 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044106.027:12109): pid=25543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60978 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044106.037:12110): pid=25543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044106.038:12111): pid=25543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25544 suid=74 rport=60978 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044106.039:12112): pid=25543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044106.040:12113): pid=25543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044106.040:12114): pid=25543 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=278 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044106.277:12115): pid=25543 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044106.307:12116): pid=25543 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044106.352:12117): pid=25543 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044106.352:12118): pid=25543 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044106.355:12119): pid=25547 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044106.355:12120): pid=25547 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044106.356:12121): pid=25547 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044106.358:12122): pid=25547 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044106.396:12123): pid=25543 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044106.396:12124): pid=25543 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044106.398:12125): pid=25543 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044106.398:12126): pid=25543 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044106.398:12127): pid=25543 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25543 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044106.398:12128): pid=25543 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25543 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044106.399:12129): pid=25543 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25543 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044106.399:12130): pid=25543 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25543 suid=0 rport=60978 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044109.432:12131): pid=25571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044109.433:12132): pid=25571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044109.433:12133): pid=25571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044109.436:12134): pid=25570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25571 suid=74 rport=60982 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044109.436:12135): pid=25570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25571 suid=74 rport=60982 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044109.496:12136): pid=25570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=60982 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044109.496:12137): pid=25570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=60982 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044109.506:12138): pid=25570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044109.506:12139): pid=25570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25571 suid=74 rport=60982 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044109.509:12140): pid=25570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044109.509:12141): pid=25570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044109.509:12142): pid=25570 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=279 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044109.749:12143): pid=25570 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044109.780:12144): pid=25570 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044109.823:12145): pid=25570 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044109.823:12146): pid=25570 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044109.827:12147): pid=25574 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044109.827:12148): pid=25574 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044109.827:12149): pid=25574 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044109.829:12150): pid=25574 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044109.873:12151): pid=25570 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044109.874:12152): pid=25570 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044109.875:12153): pid=25570 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044109.875:12154): pid=25570 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044109.875:12155): pid=25570 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044109.876:12156): pid=25570 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044109.876:12157): pid=25570 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044109.876:12158): pid=25570 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25570 suid=0 rport=60982 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044110.818:12159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044110.818:12160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044110.821:12161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044110.838:12162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044112.932:12163): pid=25604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044112.932:12164): pid=25604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044112.932:12165): pid=25604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044112.935:12166): pid=25603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25604 suid=74 rport=33336 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044112.935:12167): pid=25603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25604 suid=74 rport=33336 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044113.035:12168): pid=25603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33336 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044113.035:12169): pid=25603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33336 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044113.044:12170): pid=25603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044113.046:12171): pid=25603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25604 suid=74 rport=33336 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044113.048:12172): pid=25603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044113.048:12173): pid=25603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044113.048:12174): pid=25603 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=280 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044113.288:12175): pid=25603 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044113.321:12176): pid=25603 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044113.365:12177): pid=25603 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044113.365:12178): pid=25603 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044113.367:12179): pid=25613 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044113.367:12180): pid=25613 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044113.367:12181): pid=25613 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044113.369:12182): pid=25613 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044113.409:12183): pid=25603 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044113.410:12184): pid=25603 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044113.411:12185): pid=25603 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044113.411:12186): pid=25603 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044113.411:12187): pid=25603 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044113.411:12188): pid=25603 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044113.411:12189): pid=25603 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044113.412:12190): pid=25603 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25603 suid=0 rport=33336 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044116.067:12191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044116.067:12192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044116.070:12193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044116.086:12194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044116.450:12195): pid=25654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044116.450:12196): pid=25654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044116.451:12197): pid=25654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044116.453:12198): pid=25653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25654 suid=74 rport=33786 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044116.453:12199): pid=25653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25654 suid=74 rport=33786 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044116.550:12200): pid=25653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33786 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044116.550:12201): pid=25653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33786 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044116.559:12202): pid=25653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044116.559:12203): pid=25653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25654 suid=74 rport=33786 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044116.561:12204): pid=25653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044116.561:12205): pid=25653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044116.561:12206): pid=25653 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=281 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044116.725:12207): pid=25653 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044116.754:12208): pid=25653 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044116.796:12209): pid=25653 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044116.796:12210): pid=25653 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044116.798:12211): pid=25657 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044116.798:12212): pid=25657 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044116.798:12213): pid=25657 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25657 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044116.799:12214): pid=25657 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044116.840:12215): pid=25653 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044116.840:12216): pid=25653 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044116.841:12217): pid=25653 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044116.841:12218): pid=25653 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044116.841:12219): pid=25653 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044116.841:12220): pid=25653 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044116.842:12221): pid=25653 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044116.842:12222): pid=25653 uid=0 auid=0 ses=281 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25653 suid=0 rport=33786 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044119.873:12223): pid=25695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044119.874:12224): pid=25695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044119.874:12225): pid=25695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044119.876:12226): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25695 suid=74 rport=33792 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044119.876:12227): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25695 suid=74 rport=33792 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044119.932:12228): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33792 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044119.932:12229): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33792 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044119.942:12230): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044119.943:12231): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25695 suid=74 rport=33792 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044119.944:12232): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044119.944:12233): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044119.945:12234): pid=25691 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=282 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044120.165:12235): pid=25691 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044120.189:12236): pid=25691 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044120.232:12237): pid=25691 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044120.232:12238): pid=25691 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044120.233:12239): pid=25706 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044120.233:12240): pid=25706 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044120.233:12241): pid=25706 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044120.234:12242): pid=25706 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044120.261:12243): pid=25691 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044120.261:12244): pid=25691 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044120.261:12245): pid=25691 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044120.261:12246): pid=25691 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044120.261:12247): pid=25691 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044120.262:12248): pid=25691 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044120.262:12249): pid=25691 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044120.262:12250): pid=25691 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25691 suid=0 rport=33792 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044121.318:12251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044121.318:12252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044121.320:12253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044121.333:12254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044123.296:12255): pid=25751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044123.296:12256): pid=25751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044123.296:12257): pid=25751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044123.298:12258): pid=25750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25751 suid=74 rport=33798 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044123.298:12259): pid=25750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25751 suid=74 rport=33798 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044123.358:12260): pid=25750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33798 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044123.358:12261): pid=25750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33798 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044123.365:12262): pid=25750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044123.366:12263): pid=25750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25751 suid=74 rport=33798 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044123.368:12264): pid=25750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044123.368:12265): pid=25750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044123.369:12266): pid=25750 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=283 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044123.529:12267): pid=25750 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044123.555:12268): pid=25750 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044123.597:12269): pid=25750 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044123.597:12270): pid=25750 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044123.599:12271): pid=25757 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044123.599:12272): pid=25757 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044123.599:12273): pid=25757 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044123.601:12274): pid=25757 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044123.625:12275): pid=25750 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044123.625:12276): pid=25750 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044123.626:12277): pid=25750 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044123.626:12278): pid=25750 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044123.626:12279): pid=25750 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25750 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044123.626:12280): pid=25750 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25750 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044123.626:12281): pid=25750 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25750 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044123.626:12282): pid=25750 uid=0 auid=0 ses=283 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25750 suid=0 rport=33798 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044126.567:12283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044126.568:12284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044126.569:12285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044126.590:12286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044126.668:12287): pid=25795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25795 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044126.669:12288): pid=25795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25795 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044126.669:12289): pid=25795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25795 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044126.672:12290): pid=25794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25795 suid=74 rport=33804 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044126.672:12291): pid=25794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25795 suid=74 rport=33804 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044126.760:12292): pid=25794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33804 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044126.760:12293): pid=25794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33804 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044126.768:12294): pid=25794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044126.769:12295): pid=25794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25795 suid=74 rport=33804 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044126.771:12296): pid=25794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044126.771:12297): pid=25794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044126.771:12298): pid=25794 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=284 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044126.976:12299): pid=25794 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044126.995:12300): pid=25794 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044127.039:12301): pid=25794 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044127.039:12302): pid=25794 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044127.041:12303): pid=25797 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044127.042:12304): pid=25797 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044127.042:12305): pid=25797 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044127.043:12306): pid=25797 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044127.080:12307): pid=25794 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044127.080:12308): pid=25794 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044127.081:12309): pid=25794 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044127.081:12310): pid=25794 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044127.082:12311): pid=25794 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044127.082:12312): pid=25794 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044127.082:12313): pid=25794 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044127.082:12314): pid=25794 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25794 suid=0 rport=33804 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044130.120:12315): pid=25834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25834 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044130.120:12316): pid=25834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25834 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044130.120:12317): pid=25834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25834 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044130.123:12318): pid=25833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25834 suid=74 rport=33810 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044130.123:12319): pid=25833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25834 suid=74 rport=33810 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044130.181:12320): pid=25833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33810 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044130.181:12321): pid=25833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33810 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044130.189:12322): pid=25833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044130.190:12323): pid=25833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25834 suid=74 rport=33810 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044130.192:12324): pid=25833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044130.192:12325): pid=25833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044130.192:12326): pid=25833 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=285 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044130.420:12327): pid=25833 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044130.440:12328): pid=25833 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044130.483:12329): pid=25833 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044130.483:12330): pid=25833 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044130.486:12331): pid=25838 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044130.486:12332): pid=25838 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044130.486:12333): pid=25838 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044130.488:12334): pid=25838 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044130.520:12335): pid=25833 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044130.520:12336): pid=25833 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044130.521:12337): pid=25833 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044130.521:12338): pid=25833 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044130.521:12339): pid=25833 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044130.522:12340): pid=25833 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044130.522:12341): pid=25833 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044130.522:12342): pid=25833 uid=0 auid=0 ses=285 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25833 suid=0 rport=33810 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044131.817:12343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044131.817:12344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044131.819:12345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044131.838:12346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044133.557:12347): pid=25882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044133.557:12348): pid=25882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044133.558:12349): pid=25882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044133.560:12350): pid=25881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25882 suid=74 rport=33816 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044133.560:12351): pid=25881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25882 suid=74 rport=33816 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044133.620:12352): pid=25881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33816 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044133.620:12353): pid=25881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33816 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044133.627:12354): pid=25881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044133.628:12355): pid=25881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25882 suid=74 rport=33816 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044133.629:12356): pid=25881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044133.629:12357): pid=25881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044133.630:12358): pid=25881 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=286 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044133.794:12359): pid=25881 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044133.813:12360): pid=25881 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044133.855:12361): pid=25881 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044133.855:12362): pid=25881 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044133.858:12363): pid=25884 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044133.858:12364): pid=25884 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044133.858:12365): pid=25884 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044133.860:12366): pid=25884 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044133.886:12367): pid=25881 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044133.886:12368): pid=25881 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044133.887:12369): pid=25881 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044133.887:12370): pid=25881 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044133.887:12371): pid=25881 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044133.887:12372): pid=25881 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044133.887:12373): pid=25881 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044133.887:12374): pid=25881 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25881 suid=0 rport=33816 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044136.930:12375): pid=25923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044136.931:12376): pid=25923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044136.931:12377): pid=25923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044136.933:12378): pid=25922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25923 suid=74 rport=33822 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044136.933:12379): pid=25922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=25923 suid=74 rport=33822 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044137.024:12380): pid=25922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33822 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044137.024:12381): pid=25922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33822 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044137.032:12382): pid=25922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044137.033:12383): pid=25922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25923 suid=74 rport=33822 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044137.035:12384): pid=25922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044137.035:12385): pid=25922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044137.035:12386): pid=25922 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=287 res=1 >type=SERVICE_START msg=audit(1538044137.068:12387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044137.068:12388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044137.069:12389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044137.088:12390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538044137.198:12391): pid=25922 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044137.228:12392): pid=25922 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044137.273:12393): pid=25922 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044137.273:12394): pid=25922 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044137.276:12395): pid=25933 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044137.276:12396): pid=25933 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044137.276:12397): pid=25933 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044137.278:12398): pid=25933 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044137.321:12399): pid=25922 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044137.321:12400): pid=25922 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044137.322:12401): pid=25922 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044137.322:12402): pid=25922 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044137.323:12403): pid=25922 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=25922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044137.323:12404): pid=25922 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=25922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044137.323:12405): pid=25922 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=25922 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044137.323:12406): pid=25922 uid=0 auid=0 ses=287 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25922 suid=0 rport=33822 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044140.359:12407): pid=26007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26007 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044140.359:12408): pid=26007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26007 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044140.359:12409): pid=26007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26007 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044140.361:12410): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26007 suid=74 rport=33830 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044140.361:12411): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26007 suid=74 rport=33830 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044140.418:12412): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33830 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044140.418:12413): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33830 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044140.424:12414): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044140.426:12415): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26007 suid=74 rport=33830 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044140.427:12416): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044140.428:12417): pid=26004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044140.428:12418): pid=26004 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=288 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044140.586:12419): pid=26004 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044140.604:12420): pid=26004 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044140.646:12421): pid=26004 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044140.646:12422): pid=26004 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044140.648:12423): pid=26012 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044140.648:12424): pid=26012 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044140.648:12425): pid=26012 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044140.649:12426): pid=26012 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044140.668:12427): pid=26004 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044140.668:12428): pid=26004 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044140.669:12429): pid=26004 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044140.669:12430): pid=26004 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044140.669:12431): pid=26004 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044140.669:12432): pid=26004 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044140.669:12433): pid=26004 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044140.669:12434): pid=26004 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26004 suid=0 rport=33830 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044141.290:12435): pid=26018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044141.290:12436): pid=26018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044141.290:12437): pid=26018 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=289 res=1 >type=USER_START msg=audit(1538044141.328:12438): pid=26018 uid=0 auid=163 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044141.329:12439): pid=26018 uid=0 auid=163 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1538044142.653:12440): pid=26018 uid=0 auid=163 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044142.659:12441): pid=26018 uid=0 auid=163 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538044143.716:12442): pid=26082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044143.716:12443): pid=26082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044143.716:12444): pid=26082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044143.718:12445): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26082 suid=74 rport=33838 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044143.718:12446): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26082 suid=74 rport=33838 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044143.775:12447): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33838 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044143.775:12448): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33838 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044143.782:12449): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044143.783:12450): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26082 suid=74 rport=33838 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044143.784:12451): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044143.784:12452): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044143.785:12453): pid=26081 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=290 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044143.954:12454): pid=26081 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044143.974:12455): pid=26081 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044144.017:12456): pid=26081 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044144.017:12457): pid=26081 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044144.019:12458): pid=26085 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044144.019:12459): pid=26085 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044144.019:12460): pid=26085 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26085 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044144.021:12461): pid=26085 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044144.047:12462): pid=26081 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044144.047:12463): pid=26081 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044144.047:12464): pid=26081 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044144.048:12465): pid=26081 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044144.048:12466): pid=26081 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044144.048:12467): pid=26081 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044144.048:12468): pid=26081 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044144.048:12469): pid=26081 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26081 suid=0 rport=33838 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044145.670:12470): pid=26090 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044145.671:12471): pid=26090 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044145.671:12472): pid=26090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044145.694:12473): pid=26090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044146.291:12474): pid=26090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044146.291:12475): pid=26090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044146.420:12476): pid=26099 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044146.420:12477): pid=26099 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044146.421:12478): pid=26099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044146.432:12479): pid=26099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044146.818:12480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044146.818:12481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044146.819:12482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044146.835:12483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044146.911:12484): pid=26099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044146.911:12485): pid=26099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044147.035:12486): pid=26110 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044147.035:12487): pid=26110 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044147.035:12488): pid=26110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044147.043:12489): pid=26110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044147.090:12490): pid=26117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044147.090:12491): pid=26117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044147.090:12492): pid=26117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044147.092:12493): pid=26116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26117 suid=74 rport=33846 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044147.092:12494): pid=26116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26117 suid=74 rport=33846 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044147.159:12495): pid=26116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33846 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044147.159:12496): pid=26116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33846 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044147.167:12497): pid=26116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044147.168:12498): pid=26116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26117 suid=74 rport=33846 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044147.169:12499): pid=26116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044147.169:12500): pid=26116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044147.170:12501): pid=26116 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=291 res=1 >type=SERVICE_START msg=audit(1538044147.328:12502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=neutron-server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044147.330:12503): pid=26110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044147.330:12504): pid=26110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538044147.338:12505): pid=26116 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044147.356:12506): pid=26116 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044147.399:12507): pid=26116 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044147.399:12508): pid=26116 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044147.401:12509): pid=26142 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044147.401:12510): pid=26142 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044147.401:12511): pid=26142 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044147.402:12512): pid=26142 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044147.428:12513): pid=26116 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044147.428:12514): pid=26116 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044147.429:12515): pid=26116 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044147.429:12516): pid=26116 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044147.429:12517): pid=26116 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044147.429:12518): pid=26116 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044147.429:12519): pid=26116 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044147.429:12520): pid=26116 uid=0 auid=0 ses=291 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26116 suid=0 rport=33846 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044147.465:12521): pid=26134 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044147.466:12522): pid=26134 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044147.466:12523): pid=26134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044147.675:12524): pid=26134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044147.947:12525): pid=26134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044147.947:12526): pid=26134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044150.471:12527): pid=26221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044150.471:12528): pid=26221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044150.472:12529): pid=26221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044150.474:12530): pid=26220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26221 suid=74 rport=33914 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044150.474:12531): pid=26220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26221 suid=74 rport=33914 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044150.565:12532): pid=26220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33914 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044150.565:12533): pid=26220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33914 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044150.574:12534): pid=26220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044150.575:12535): pid=26220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26221 suid=74 rport=33914 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044150.577:12536): pid=26220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044150.577:12537): pid=26220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044150.577:12538): pid=26220 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=292 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044150.830:12539): pid=26220 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044150.861:12540): pid=26220 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044150.905:12541): pid=26220 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044150.905:12542): pid=26220 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044150.908:12543): pid=26223 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044150.909:12544): pid=26223 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044150.909:12545): pid=26223 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044150.910:12546): pid=26223 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044150.945:12547): pid=26220 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044150.945:12548): pid=26220 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044150.946:12549): pid=26220 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044150.946:12550): pid=26220 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044150.946:12551): pid=26220 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26220 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044150.946:12552): pid=26220 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26220 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044150.947:12553): pid=26220 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26220 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044150.947:12554): pid=26220 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26220 suid=0 rport=33914 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044152.818:12555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044152.818:12556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044152.821:12557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044152.984:12558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044153.991:12559): pid=26253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044153.991:12560): pid=26253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044153.991:12561): pid=26253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044153.994:12562): pid=26252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26253 suid=74 rport=33920 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044153.994:12563): pid=26252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26253 suid=74 rport=33920 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044154.065:12564): pid=26252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33920 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044154.065:12565): pid=26252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33920 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044154.075:12566): pid=26252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044154.076:12567): pid=26252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26253 suid=74 rport=33920 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044154.078:12568): pid=26252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044154.078:12569): pid=26252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044154.079:12570): pid=26252 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=293 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044154.289:12571): pid=26252 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044154.319:12572): pid=26252 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044154.363:12573): pid=26252 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044154.363:12574): pid=26252 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044154.366:12575): pid=26259 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26259 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044154.366:12576): pid=26259 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26259 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044154.367:12577): pid=26259 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26259 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044154.368:12578): pid=26259 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044154.408:12579): pid=26252 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044154.408:12580): pid=26252 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044154.409:12581): pid=26252 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044154.409:12582): pid=26252 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044154.410:12583): pid=26252 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044154.410:12584): pid=26252 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044154.410:12585): pid=26252 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044154.410:12586): pid=26252 uid=0 auid=0 ses=293 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26252 suid=0 rport=33920 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044157.458:12587): pid=26293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044157.458:12588): pid=26293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044157.458:12589): pid=26293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044157.462:12590): pid=26292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26293 suid=74 rport=33924 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044157.462:12591): pid=26292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26293 suid=74 rport=33924 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044157.561:12592): pid=26292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33924 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044157.561:12593): pid=26292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33924 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044157.570:12594): pid=26292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044157.571:12595): pid=26292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26293 suid=74 rport=33924 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044157.573:12596): pid=26292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044157.573:12597): pid=26292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044157.574:12598): pid=26292 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=294 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044157.809:12599): pid=26292 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044157.841:12600): pid=26292 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044157.883:12601): pid=26292 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044157.884:12602): pid=26292 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044157.886:12603): pid=26296 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044157.887:12604): pid=26296 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044157.887:12605): pid=26296 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044157.888:12606): pid=26296 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044157.923:12607): pid=26292 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044157.923:12608): pid=26292 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044157.924:12609): pid=26292 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044157.925:12610): pid=26292 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044157.925:12611): pid=26292 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26292 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044157.925:12612): pid=26292 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26292 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044157.925:12613): pid=26292 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26292 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044157.925:12614): pid=26292 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26292 suid=0 rport=33924 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044158.068:12615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044158.068:12616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044158.069:12617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044158.086:12618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044160.962:12619): pid=26328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044160.963:12620): pid=26328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044160.963:12621): pid=26328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044160.965:12622): pid=26327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26328 suid=74 rport=33930 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044160.965:12623): pid=26327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26328 suid=74 rport=33930 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044161.065:12624): pid=26327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33930 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044161.065:12625): pid=26327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33930 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044161.074:12626): pid=26327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044161.075:12627): pid=26327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26328 suid=74 rport=33930 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044161.078:12628): pid=26327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044161.078:12629): pid=26327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044161.078:12630): pid=26327 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=295 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044161.306:12631): pid=26327 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044161.328:12632): pid=26327 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044161.372:12633): pid=26327 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044161.372:12634): pid=26327 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044161.374:12635): pid=26341 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044161.374:12636): pid=26341 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044161.374:12637): pid=26341 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044161.375:12638): pid=26341 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044161.409:12639): pid=26327 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044161.410:12640): pid=26327 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044161.410:12641): pid=26327 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044161.410:12642): pid=26327 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044161.410:12643): pid=26327 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26327 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044161.410:12644): pid=26327 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26327 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044161.411:12645): pid=26327 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26327 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044161.411:12646): pid=26327 uid=0 auid=0 ses=295 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26327 suid=0 rport=33930 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044163.318:12647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044163.318:12648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044163.320:12649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044163.339:12650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044164.450:12651): pid=26370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044164.450:12652): pid=26370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044164.451:12653): pid=26370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044164.453:12654): pid=26369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26370 suid=74 rport=33934 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044164.454:12655): pid=26369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26370 suid=74 rport=33934 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044164.551:12656): pid=26369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33934 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044164.551:12657): pid=26369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33934 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044164.560:12658): pid=26369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044164.561:12659): pid=26369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26370 suid=74 rport=33934 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044164.563:12660): pid=26369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044164.563:12661): pid=26369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044164.563:12662): pid=26369 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=296 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044164.721:12663): pid=26369 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044164.750:12664): pid=26369 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044164.793:12665): pid=26369 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044164.793:12666): pid=26369 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044164.797:12667): pid=26373 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044164.797:12668): pid=26373 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044164.797:12669): pid=26373 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044164.799:12670): pid=26373 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044164.841:12671): pid=26369 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044164.841:12672): pid=26369 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044164.841:12673): pid=26369 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044164.841:12674): pid=26369 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044164.841:12675): pid=26369 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044164.841:12676): pid=26369 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044164.841:12677): pid=26369 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044164.841:12678): pid=26369 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26369 suid=0 rport=33934 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044167.879:12679): pid=26407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044167.880:12680): pid=26407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044167.880:12681): pid=26407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044167.882:12682): pid=26406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26407 suid=74 rport=33940 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044167.883:12683): pid=26406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26407 suid=74 rport=33940 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044167.972:12684): pid=26406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=33940 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044167.972:12685): pid=26406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=33940 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044167.981:12686): pid=26406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044167.981:12687): pid=26406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26407 suid=74 rport=33940 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044167.984:12688): pid=26406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044167.985:12689): pid=26406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044167.985:12690): pid=26406 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=297 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044168.214:12691): pid=26406 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044168.246:12692): pid=26406 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044168.290:12693): pid=26406 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044168.290:12694): pid=26406 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044168.293:12695): pid=26414 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044168.293:12696): pid=26414 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044168.294:12697): pid=26414 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26414 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044168.295:12698): pid=26414 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044168.327:12699): pid=26406 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044168.327:12700): pid=26406 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044168.328:12701): pid=26406 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044168.328:12702): pid=26406 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044168.329:12703): pid=26406 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26406 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044168.329:12704): pid=26406 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26406 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044168.329:12705): pid=26406 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26406 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044168.329:12706): pid=26406 uid=0 auid=0 ses=297 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26406 suid=0 rport=33940 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044168.345:12707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044168.345:12708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044168.347:12709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044168.361:12710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044169.333:12711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044170.027:12712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-object-expirer comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044171.380:12713): pid=26597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044171.380:12714): pid=26597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044171.380:12715): pid=26597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044171.383:12716): pid=26596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26597 suid=74 rport=34154 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044171.383:12717): pid=26596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26597 suid=74 rport=34154 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044171.443:12718): pid=26596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34154 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044171.443:12719): pid=26596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=34154 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044171.451:12720): pid=26596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044171.452:12721): pid=26596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26597 suid=74 rport=34154 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044171.454:12722): pid=26596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044171.454:12723): pid=26596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044171.454:12724): pid=26596 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=298 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044171.699:12725): pid=26596 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044171.730:12726): pid=26596 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044171.774:12727): pid=26596 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044171.774:12728): pid=26596 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044171.777:12729): pid=26608 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044171.777:12730): pid=26608 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044171.777:12731): pid=26608 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044171.779:12732): pid=26608 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044171.818:12733): pid=26596 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044171.818:12734): pid=26596 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044171.819:12735): pid=26596 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044171.819:12736): pid=26596 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044171.819:12737): pid=26596 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044171.819:12738): pid=26596 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044171.819:12739): pid=26596 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044171.819:12740): pid=26596 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26596 suid=0 rport=34154 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044174.887:12741): pid=26635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26635 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044174.887:12742): pid=26635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26635 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044174.887:12743): pid=26635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26635 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044174.889:12744): pid=26634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26635 suid=74 rport=34972 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044174.889:12745): pid=26634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26635 suid=74 rport=34972 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044174.951:12746): pid=26634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34972 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044174.951:12747): pid=26634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=34972 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044174.960:12748): pid=26634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044174.960:12749): pid=26634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26635 suid=74 rport=34972 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044174.963:12750): pid=26634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044174.963:12751): pid=26634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044174.963:12752): pid=26634 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=299 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044175.207:12753): pid=26634 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044175.236:12754): pid=26634 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044175.280:12755): pid=26634 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044175.280:12756): pid=26634 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044175.283:12757): pid=26638 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044175.283:12758): pid=26638 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044175.283:12759): pid=26638 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044175.285:12760): pid=26638 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044175.322:12761): pid=26634 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044175.322:12762): pid=26634 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044175.323:12763): pid=26634 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044175.323:12764): pid=26634 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044175.323:12765): pid=26634 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26634 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044175.323:12766): pid=26634 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26634 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044175.324:12767): pid=26634 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26634 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044175.324:12768): pid=26634 uid=0 auid=0 ses=299 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26634 suid=0 rport=34972 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044175.568:12769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044175.568:12770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044175.570:12771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044175.787:12772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044178.370:12773): pid=26675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26675 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044178.370:12774): pid=26675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26675 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044178.370:12775): pid=26675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26675 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044178.373:12776): pid=26674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26675 suid=74 rport=34978 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044178.373:12777): pid=26674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26675 suid=74 rport=34978 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044178.454:12778): pid=26674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34978 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044178.454:12779): pid=26674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=34978 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044178.463:12780): pid=26674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044178.464:12781): pid=26674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26675 suid=74 rport=34978 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044178.466:12782): pid=26674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044178.466:12783): pid=26674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044178.466:12784): pid=26674 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=300 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044178.641:12785): pid=26674 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044178.669:12786): pid=26674 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044178.713:12787): pid=26674 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044178.714:12788): pid=26674 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044178.717:12789): pid=26682 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044178.717:12790): pid=26682 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044178.717:12791): pid=26682 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044178.718:12792): pid=26682 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044178.753:12793): pid=26674 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044178.753:12794): pid=26674 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044178.754:12795): pid=26674 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044178.754:12796): pid=26674 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044178.754:12797): pid=26674 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044178.754:12798): pid=26674 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044178.755:12799): pid=26674 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044178.755:12800): pid=26674 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26674 suid=0 rport=34978 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044180.817:12801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044180.818:12802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044180.821:12803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044180.834:12804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044181.800:12805): pid=26723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044181.800:12806): pid=26723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044181.800:12807): pid=26723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044181.803:12808): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26723 suid=74 rport=34984 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044181.803:12809): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26723 suid=74 rport=34984 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044181.902:12810): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044181.902:12811): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=34984 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044181.910:12812): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044181.911:12813): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26723 suid=74 rport=34984 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044181.913:12814): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044181.913:12815): pid=26722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044181.913:12816): pid=26722 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=301 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044182.145:12817): pid=26722 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044182.171:12818): pid=26722 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044182.215:12819): pid=26722 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044182.215:12820): pid=26722 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044182.218:12821): pid=26726 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044182.218:12822): pid=26726 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044182.218:12823): pid=26726 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044182.220:12824): pid=26726 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044182.246:12825): pid=26722 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044182.246:12826): pid=26722 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044182.246:12827): pid=26722 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044182.246:12828): pid=26722 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044182.247:12829): pid=26722 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044182.247:12830): pid=26722 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044182.247:12831): pid=26722 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044182.247:12832): pid=26722 uid=0 auid=0 ses=301 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26722 suid=0 rport=34984 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044185.288:12833): pid=26766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044185.288:12834): pid=26766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044185.288:12835): pid=26766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044185.291:12836): pid=26765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26766 suid=74 rport=34990 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044185.291:12837): pid=26765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26766 suid=74 rport=34990 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044185.391:12838): pid=26765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34990 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044185.391:12839): pid=26765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=34990 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044185.399:12840): pid=26765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044185.399:12841): pid=26765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26766 suid=74 rport=34990 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044185.401:12842): pid=26765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044185.402:12843): pid=26765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044185.402:12844): pid=26765 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=302 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044185.638:12845): pid=26765 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044185.663:12846): pid=26765 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044185.707:12847): pid=26765 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044185.707:12848): pid=26765 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044185.710:12849): pid=26769 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044185.710:12850): pid=26769 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044185.710:12851): pid=26769 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044185.712:12852): pid=26769 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044185.744:12853): pid=26765 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044185.745:12854): pid=26765 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044185.745:12855): pid=26765 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044185.746:12856): pid=26765 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044185.746:12857): pid=26765 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044185.746:12858): pid=26765 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044185.746:12859): pid=26765 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044185.746:12860): pid=26765 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26765 suid=0 rport=34990 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044186.068:12861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044186.068:12862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044186.069:12863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044186.088:12864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044188.791:12865): pid=26800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044188.792:12866): pid=26800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044188.792:12867): pid=26800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044188.795:12868): pid=26799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26800 suid=74 rport=34996 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044188.795:12869): pid=26799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26800 suid=74 rport=34996 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044188.894:12870): pid=26799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=34996 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044188.894:12871): pid=26799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=34996 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044188.902:12872): pid=26799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044188.903:12873): pid=26799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26800 suid=74 rport=34996 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044188.906:12874): pid=26799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044188.906:12875): pid=26799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044188.906:12876): pid=26799 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=303 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044189.127:12877): pid=26799 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044189.149:12878): pid=26799 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044189.193:12879): pid=26799 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044189.193:12880): pid=26799 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044189.196:12881): pid=26803 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044189.196:12882): pid=26803 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044189.197:12883): pid=26803 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044189.198:12884): pid=26803 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044189.226:12885): pid=26799 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044189.226:12886): pid=26799 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044189.227:12887): pid=26799 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044189.227:12888): pid=26799 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044189.227:12889): pid=26799 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044189.227:12890): pid=26799 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044189.227:12891): pid=26799 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26799 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044189.227:12892): pid=26799 uid=0 auid=0 ses=303 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26799 suid=0 rport=34996 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044191.318:12893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044191.318:12894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044191.320:12895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044191.339:12896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044192.266:12897): pid=26850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26850 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044192.266:12898): pid=26850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26850 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044192.266:12899): pid=26850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26850 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044192.268:12900): pid=26849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26850 suid=74 rport=35002 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044192.268:12901): pid=26849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26850 suid=74 rport=35002 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044192.334:12902): pid=26849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35002 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044192.334:12903): pid=26849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=35002 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044192.343:12904): pid=26849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044192.344:12905): pid=26849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26850 suid=74 rport=35002 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044192.345:12906): pid=26849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044192.345:12907): pid=26849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044192.345:12908): pid=26849 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=304 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044192.504:12909): pid=26849 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044192.524:12910): pid=26849 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044192.568:12911): pid=26849 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044192.568:12912): pid=26849 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044192.571:12913): pid=26857 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044192.572:12914): pid=26857 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044192.572:12915): pid=26857 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044192.574:12916): pid=26857 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044192.609:12917): pid=26849 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044192.609:12918): pid=26849 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044192.610:12919): pid=26849 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044192.610:12920): pid=26849 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044192.611:12921): pid=26849 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044192.611:12922): pid=26849 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044192.611:12923): pid=26849 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044192.611:12924): pid=26849 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26849 suid=0 rport=35002 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044195.656:12925): pid=26883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26883 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044195.657:12926): pid=26883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26883 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044195.657:12927): pid=26883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26883 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044195.660:12928): pid=26882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26883 suid=74 rport=35006 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044195.660:12929): pid=26882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26883 suid=74 rport=35006 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044195.760:12930): pid=26882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35006 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044195.760:12931): pid=26882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=35006 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044195.768:12932): pid=26882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044195.769:12933): pid=26882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26883 suid=74 rport=35006 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044195.771:12934): pid=26882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044195.771:12935): pid=26882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044195.771:12936): pid=26882 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=305 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044195.991:12937): pid=26882 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044196.010:12938): pid=26882 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044196.053:12939): pid=26882 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044196.053:12940): pid=26882 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044196.054:12941): pid=26886 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044196.055:12942): pid=26886 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044196.055:12943): pid=26886 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044196.056:12944): pid=26886 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044196.090:12945): pid=26882 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044196.091:12946): pid=26882 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044196.092:12947): pid=26882 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044196.092:12948): pid=26882 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044196.092:12949): pid=26882 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044196.092:12950): pid=26882 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044196.093:12951): pid=26882 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26882 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044196.093:12952): pid=26882 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26882 suid=0 rport=35006 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044196.568:12953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044196.568:12954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044196.570:12955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044196.583:12956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044199.136:12957): pid=26960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26960 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044199.136:12958): pid=26960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26960 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044199.136:12959): pid=26960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26960 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044199.139:12960): pid=26959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26960 suid=74 rport=35014 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044199.139:12961): pid=26959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=26960 suid=74 rport=35014 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044199.205:12962): pid=26959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35014 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044199.205:12963): pid=26959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=35014 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044199.215:12964): pid=26959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044199.215:12965): pid=26959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26960 suid=74 rport=35014 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044199.217:12966): pid=26959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044199.217:12967): pid=26959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044199.218:12968): pid=26959 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=306 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044199.384:12969): pid=26959 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044199.418:12970): pid=26959 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044199.463:12971): pid=26959 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044199.464:12972): pid=26959 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044199.467:12973): pid=26963 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044199.467:12974): pid=26963 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044199.467:12975): pid=26963 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044199.468:12976): pid=26963 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044199.502:12977): pid=26959 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044199.502:12978): pid=26959 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044199.503:12979): pid=26959 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044199.503:12980): pid=26959 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044199.503:12981): pid=26959 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=26959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044199.503:12982): pid=26959 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=26959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044199.503:12983): pid=26959 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=26959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044199.503:12984): pid=26959 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26959 suid=0 rport=35014 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044201.674:12985): pid=26996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044201.675:12986): pid=26996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044201.676:12987): pid=26996 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=307 res=1 >type=SERVICE_START msg=audit(1538044201.683:12988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044201.683:12989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044201.685:12990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044201.707:12991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538044201.723:12992): pid=26996 uid=0 auid=163 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044201.724:12993): pid=26996 uid=0 auid=163 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538044202.554:12994): pid=27024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044202.554:12995): pid=27024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044202.554:12996): pid=27024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044202.557:12997): pid=27023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27024 suid=74 rport=35022 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044202.557:12998): pid=27023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27024 suid=74 rport=35022 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044202.627:12999): pid=27023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35022 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044202.627:13000): pid=27023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=35022 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044202.636:13001): pid=27023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044202.637:13002): pid=27023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27024 suid=74 rport=35022 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044202.640:13003): pid=27023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044202.640:13004): pid=27023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044202.640:13005): pid=27023 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=308 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044202.887:13006): pid=27023 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044202.918:13007): pid=27023 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044202.963:13008): pid=27023 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044202.963:13009): pid=27023 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044202.966:13010): pid=27033 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044202.966:13011): pid=27033 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044202.966:13012): pid=27033 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27033 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044202.968:13013): pid=27033 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044203.001:13014): pid=27023 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044203.001:13015): pid=27023 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044203.001:13016): pid=27023 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044203.001:13017): pid=27023 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044203.002:13018): pid=27023 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044203.002:13019): pid=27023 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044203.002:13020): pid=27023 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044203.002:13021): pid=27023 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27023 suid=0 rport=35022 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRED_DISP msg=audit(1538044203.834:13022): pid=26996 uid=0 auid=163 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044203.840:13023): pid=26996 uid=0 auid=163 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1538044205.663:13024): pid=27059 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044205.664:13025): pid=27059 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044205.665:13026): pid=27059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044205.687:13027): pid=27059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044206.043:13028): pid=27072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044206.043:13029): pid=27072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044206.043:13030): pid=27072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044206.046:13031): pid=27071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27072 suid=74 rport=35030 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044206.046:13032): pid=27071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27072 suid=74 rport=35030 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044206.113:13033): pid=27071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35030 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044206.113:13034): pid=27071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=35030 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044206.122:13035): pid=27071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044206.122:13036): pid=27071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27072 suid=74 rport=35030 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044206.124:13037): pid=27071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044206.125:13038): pid=27071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044206.125:13039): pid=27071 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=309 res=1 >type=USER_END msg=audit(1538044206.340:13040): pid=27059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044206.341:13041): pid=27059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538044206.356:13042): pid=27071 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044206.381:13043): pid=27071 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044206.424:13044): pid=27071 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044206.424:13045): pid=27071 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044206.425:13046): pid=27086 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044206.425:13047): pid=27086 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044206.425:13048): pid=27086 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27086 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044206.427:13049): pid=27086 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044206.458:13050): pid=27071 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044206.458:13051): pid=27071 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044206.459:13052): pid=27071 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044206.460:13053): pid=27071 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044206.460:13054): pid=27071 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044206.460:13055): pid=27071 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044206.460:13056): pid=27071 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044206.460:13057): pid=27071 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27071 suid=0 rport=35030 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044206.495:13058): pid=27084 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044206.495:13059): pid=27084 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044206.496:13060): pid=27084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044206.517:13061): pid=27084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044206.817:13062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044206.817:13063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044206.818:13064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044206.840:13065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044207.060:13066): pid=27084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044207.060:13067): pid=27084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044207.183:13068): pid=27103 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044207.183:13069): pid=27103 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044207.184:13070): pid=27103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044207.194:13071): pid=27103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044207.713:13072): pid=27103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044207.713:13073): pid=27103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044207.883:13074): pid=27112 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044207.884:13075): pid=27112 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044207.884:13076): pid=27112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044207.904:13077): pid=27112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044208.141:13078): pid=27112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044208.141:13079): pid=27112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044209.510:13080): pid=27139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27139 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044209.510:13081): pid=27139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27139 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044209.511:13082): pid=27139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27139 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044209.513:13083): pid=27138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27139 suid=74 rport=35034 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044209.513:13084): pid=27138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27139 suid=74 rport=35034 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044209.614:13085): pid=27138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35034 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044209.614:13086): pid=27138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=35034 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044209.624:13087): pid=27138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044209.625:13088): pid=27138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27139 suid=74 rport=35034 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044209.626:13089): pid=27138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044209.627:13090): pid=27138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044209.627:13091): pid=27138 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=310 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044209.795:13092): pid=27138 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044209.821:13093): pid=27138 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044209.864:13094): pid=27138 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044209.864:13095): pid=27138 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044209.867:13096): pid=27142 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044209.868:13097): pid=27142 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044209.868:13098): pid=27142 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27142 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044209.869:13099): pid=27142 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044209.902:13100): pid=27138 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044209.902:13101): pid=27138 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044209.903:13102): pid=27138 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044209.903:13103): pid=27138 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044209.903:13104): pid=27138 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044209.903:13105): pid=27138 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044209.903:13106): pid=27138 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044209.903:13107): pid=27138 uid=0 auid=0 ses=310 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27138 suid=0 rport=35034 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044212.067:13108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044212.067:13109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044212.069:13110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044212.085:13111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044212.954:13112): pid=27173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044212.954:13113): pid=27173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044212.954:13114): pid=27173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044212.957:13115): pid=27172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27173 suid=74 rport=35040 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044212.957:13116): pid=27172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27173 suid=74 rport=35040 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044213.057:13117): pid=27172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35040 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044213.057:13118): pid=27172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=35040 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044213.067:13119): pid=27172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044213.068:13120): pid=27172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27173 suid=74 rport=35040 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044213.069:13121): pid=27172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044213.070:13122): pid=27172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044213.070:13123): pid=27172 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=311 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044213.308:13124): pid=27172 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044213.342:13125): pid=27172 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044213.387:13126): pid=27172 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044213.387:13127): pid=27172 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044213.388:13128): pid=27182 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044213.388:13129): pid=27182 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044213.388:13130): pid=27182 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044213.390:13131): pid=27182 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044213.424:13132): pid=27172 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044213.424:13133): pid=27172 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044213.425:13134): pid=27172 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044213.425:13135): pid=27172 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044213.425:13136): pid=27172 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044213.426:13137): pid=27172 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044213.426:13138): pid=27172 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044213.426:13139): pid=27172 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27172 suid=0 rport=35040 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044216.467:13140): pid=27212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044216.468:13141): pid=27212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044216.468:13142): pid=27212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044216.471:13143): pid=27211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27212 suid=74 rport=35044 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044216.471:13144): pid=27211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27212 suid=74 rport=35044 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044216.571:13145): pid=27211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35044 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044216.571:13146): pid=27211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=35044 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044216.580:13147): pid=27211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044216.582:13148): pid=27211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27212 suid=74 rport=35044 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044216.584:13149): pid=27211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044216.584:13150): pid=27211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044216.584:13151): pid=27211 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=312 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044216.821:13152): pid=27211 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044216.849:13153): pid=27211 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044216.892:13154): pid=27211 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044216.892:13155): pid=27211 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044216.893:13156): pid=27219 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044216.893:13157): pid=27219 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044216.893:13158): pid=27219 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044216.894:13159): pid=27219 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044216.927:13160): pid=27211 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044216.927:13161): pid=27211 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044216.928:13162): pid=27211 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044216.928:13163): pid=27211 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044216.928:13164): pid=27211 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044216.929:13165): pid=27211 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044216.929:13166): pid=27211 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044216.929:13167): pid=27211 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27211 suid=0 rport=35044 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044217.318:13168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044217.318:13169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044217.320:13170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044217.338:13171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044219.971:13172): pid=27256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044219.971:13173): pid=27256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044219.971:13174): pid=27256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044219.974:13175): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27256 suid=74 rport=35050 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044219.975:13176): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27256 suid=74 rport=35050 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044220.058:13177): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35050 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044220.058:13178): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=35050 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044220.067:13179): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044220.068:13180): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27256 suid=74 rport=35050 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044220.069:13181): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044220.070:13182): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044220.070:13183): pid=27255 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=313 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044220.227:13184): pid=27255 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044220.255:13185): pid=27255 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044220.298:13186): pid=27255 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044220.298:13187): pid=27255 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044220.300:13188): pid=27262 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044220.300:13189): pid=27262 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044220.300:13190): pid=27262 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044220.301:13191): pid=27262 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044220.326:13192): pid=27255 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044220.326:13193): pid=27255 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044220.327:13194): pid=27255 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044220.327:13195): pid=27255 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044220.327:13196): pid=27255 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044220.327:13197): pid=27255 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044220.327:13198): pid=27255 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044220.327:13199): pid=27255 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27255 suid=0 rport=35050 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044222.568:13200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044222.568:13201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044222.570:13202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044222.585:13203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044223.376:13204): pid=27300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27300 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044223.376:13205): pid=27300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27300 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044223.376:13206): pid=27300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27300 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044223.379:13207): pid=27299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27300 suid=74 rport=35056 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044223.379:13208): pid=27299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27300 suid=74 rport=35056 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044223.444:13209): pid=27299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35056 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044223.444:13210): pid=27299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=35056 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044223.453:13211): pid=27299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044223.454:13212): pid=27299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27300 suid=74 rport=35056 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044223.456:13213): pid=27299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044223.456:13214): pid=27299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044223.456:13215): pid=27299 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=314 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044223.612:13216): pid=27299 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044223.640:13217): pid=27299 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044223.684:13218): pid=27299 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044223.684:13219): pid=27299 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044223.687:13220): pid=27305 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044223.687:13221): pid=27305 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044223.687:13222): pid=27305 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044223.688:13223): pid=27305 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044223.724:13224): pid=27299 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044223.724:13225): pid=27299 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044223.725:13226): pid=27299 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044223.725:13227): pid=27299 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044223.725:13228): pid=27299 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044223.725:13229): pid=27299 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044223.725:13230): pid=27299 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044223.726:13231): pid=27299 uid=0 auid=0 ses=314 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27299 suid=0 rport=35056 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044226.768:13232): pid=27343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044226.768:13233): pid=27343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044226.768:13234): pid=27343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044226.771:13235): pid=27342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27343 suid=74 rport=35062 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044226.771:13236): pid=27342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27343 suid=74 rport=35062 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044226.879:13237): pid=27342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35062 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044226.879:13238): pid=27342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=35062 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044226.887:13239): pid=27342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044226.888:13240): pid=27342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27343 suid=74 rport=35062 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044226.889:13241): pid=27342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044226.889:13242): pid=27342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044226.890:13243): pid=27342 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=315 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044227.057:13244): pid=27342 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044227.088:13245): pid=27342 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044227.131:13246): pid=27342 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044227.131:13247): pid=27342 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044227.133:13248): pid=27350 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044227.133:13249): pid=27350 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044227.134:13250): pid=27350 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27350 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044227.135:13251): pid=27350 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044227.164:13252): pid=27342 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044227.164:13253): pid=27342 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044227.165:13254): pid=27342 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044227.165:13255): pid=27342 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044227.165:13256): pid=27342 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044227.165:13257): pid=27342 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044227.165:13258): pid=27342 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044227.165:13259): pid=27342 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27342 suid=0 rport=35062 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044227.818:13260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044227.818:13261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044227.819:13262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044227.836:13263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044230.207:13264): pid=27383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044230.208:13265): pid=27383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044230.208:13266): pid=27383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044230.210:13267): pid=27382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27383 suid=74 rport=35068 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044230.210:13268): pid=27382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27383 suid=74 rport=35068 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044230.310:13269): pid=27382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35068 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044230.310:13270): pid=27382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=35068 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044230.318:13271): pid=27382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044230.319:13272): pid=27382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27383 suid=74 rport=35068 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044230.321:13273): pid=27382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044230.322:13274): pid=27382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044230.322:13275): pid=27382 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=316 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044230.494:13276): pid=27382 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044230.523:13277): pid=27382 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044230.567:13278): pid=27382 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044230.567:13279): pid=27382 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044230.568:13280): pid=27389 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044230.568:13281): pid=27389 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044230.568:13282): pid=27389 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044230.570:13283): pid=27389 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044230.600:13284): pid=27382 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044230.600:13285): pid=27382 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044230.601:13286): pid=27382 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044230.601:13287): pid=27382 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044230.602:13288): pid=27382 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27382 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044230.602:13289): pid=27382 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27382 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044230.602:13290): pid=27382 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27382 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044230.602:13291): pid=27382 uid=0 auid=0 ses=316 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27382 suid=0 rport=35068 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044233.068:13292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044233.068:13293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044233.070:13294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044233.091:13295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044233.650:13296): pid=27420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044233.651:13297): pid=27420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044233.651:13298): pid=27420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044233.653:13299): pid=27419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27420 suid=74 rport=35812 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044233.654:13300): pid=27419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27420 suid=74 rport=35812 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044233.716:13301): pid=27419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=35812 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044233.716:13302): pid=27419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=35812 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044233.725:13303): pid=27419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044233.726:13304): pid=27419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27420 suid=74 rport=35812 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044233.728:13305): pid=27419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044233.729:13306): pid=27419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044233.729:13307): pid=27419 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=317 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044233.972:13308): pid=27419 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044233.999:13309): pid=27419 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044234.043:13310): pid=27419 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044234.043:13311): pid=27419 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044234.046:13312): pid=27422 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044234.046:13313): pid=27422 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044234.047:13314): pid=27422 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27422 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044234.048:13315): pid=27422 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044234.090:13316): pid=27419 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044234.090:13317): pid=27419 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044234.091:13318): pid=27419 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044234.092:13319): pid=27419 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044234.092:13320): pid=27419 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27419 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044234.092:13321): pid=27419 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27419 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044234.092:13322): pid=27419 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27419 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044234.093:13323): pid=27419 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27419 suid=0 rport=35812 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044237.136:13324): pid=27461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044237.136:13325): pid=27461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044237.136:13326): pid=27461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044237.139:13327): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27461 suid=74 rport=36102 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044237.139:13328): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27461 suid=74 rport=36102 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044237.218:13329): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36102 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044237.218:13330): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36102 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044237.226:13331): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044237.227:13332): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27461 suid=74 rport=36102 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044237.228:13333): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044237.228:13334): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044237.228:13335): pid=27460 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=318 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044237.386:13336): pid=27460 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044237.409:13337): pid=27460 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044237.453:13338): pid=27460 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044237.453:13339): pid=27460 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044237.456:13340): pid=27463 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044237.456:13341): pid=27463 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044237.456:13342): pid=27463 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044237.457:13343): pid=27463 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044237.483:13344): pid=27460 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044237.483:13345): pid=27460 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044237.483:13346): pid=27460 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044237.483:13347): pid=27460 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044237.483:13348): pid=27460 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044237.483:13349): pid=27460 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044237.483:13350): pid=27460 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044237.484:13351): pid=27460 uid=0 auid=0 ses=318 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27460 suid=0 rport=36102 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044238.317:13352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044238.317:13353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044238.319:13354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044238.332:13355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044240.522:13356): pid=27505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044240.522:13357): pid=27505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044240.522:13358): pid=27505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044240.525:13359): pid=27504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27505 suid=74 rport=36108 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044240.525:13360): pid=27504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27505 suid=74 rport=36108 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044240.585:13361): pid=27504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044240.585:13362): pid=27504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044240.594:13363): pid=27504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044240.595:13364): pid=27504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27505 suid=74 rport=36108 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044240.596:13365): pid=27504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044240.596:13366): pid=27504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044240.597:13367): pid=27504 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=319 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044240.761:13368): pid=27504 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044240.791:13369): pid=27504 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044240.835:13370): pid=27504 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044240.835:13371): pid=27504 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044240.838:13372): pid=27507 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044240.838:13373): pid=27507 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044240.838:13374): pid=27507 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044240.839:13375): pid=27507 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044240.874:13376): pid=27504 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044240.874:13377): pid=27504 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044240.875:13378): pid=27504 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044240.876:13379): pid=27504 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044240.876:13380): pid=27504 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044240.876:13381): pid=27504 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044240.876:13382): pid=27504 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044240.876:13383): pid=27504 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27504 suid=0 rport=36108 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044243.568:13384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044243.568:13385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044243.570:13386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044243.585:13387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044243.918:13388): pid=27550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044243.918:13389): pid=27550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044243.918:13390): pid=27550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044243.921:13391): pid=27549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27550 suid=74 rport=36114 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044243.921:13392): pid=27549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27550 suid=74 rport=36114 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044244.019:13393): pid=27549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36114 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044244.019:13394): pid=27549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36114 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044244.028:13395): pid=27549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044244.029:13396): pid=27549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27550 suid=74 rport=36114 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044244.031:13397): pid=27549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044244.031:13398): pid=27549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044244.032:13399): pid=27549 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=320 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044244.246:13400): pid=27549 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044244.275:13401): pid=27549 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044244.318:13402): pid=27549 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044244.318:13403): pid=27549 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044244.321:13404): pid=27553 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044244.322:13405): pid=27553 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044244.322:13406): pid=27553 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044244.323:13407): pid=27553 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044244.354:13408): pid=27549 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044244.354:13409): pid=27549 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044244.355:13410): pid=27549 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044244.355:13411): pid=27549 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044244.356:13412): pid=27549 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044244.356:13413): pid=27549 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044244.356:13414): pid=27549 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044244.356:13415): pid=27549 uid=0 auid=0 ses=320 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27549 suid=0 rport=36114 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044247.396:13416): pid=27581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044247.396:13417): pid=27581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044247.396:13418): pid=27581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044247.400:13419): pid=27580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27581 suid=74 rport=36120 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044247.400:13420): pid=27580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27581 suid=74 rport=36120 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044247.471:13421): pid=27580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36120 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044247.471:13422): pid=27580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36120 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044247.481:13423): pid=27580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044247.482:13424): pid=27580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27581 suid=74 rport=36120 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044247.483:13425): pid=27580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044247.483:13426): pid=27580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044247.483:13427): pid=27580 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=321 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044247.662:13428): pid=27580 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044247.694:13429): pid=27580 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044247.737:13430): pid=27580 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044247.737:13431): pid=27580 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044247.738:13432): pid=27588 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044247.738:13433): pid=27588 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044247.738:13434): pid=27588 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044247.739:13435): pid=27588 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044247.774:13436): pid=27580 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044247.774:13437): pid=27580 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044247.775:13438): pid=27580 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044247.776:13439): pid=27580 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044247.776:13440): pid=27580 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044247.776:13441): pid=27580 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044247.776:13442): pid=27580 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044247.776:13443): pid=27580 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27580 suid=0 rport=36120 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044248.818:13444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044248.818:13445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044248.820:13446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044248.838:13447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044250.820:13448): pid=27621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27621 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044250.821:13449): pid=27621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27621 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044250.821:13450): pid=27621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27621 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044250.824:13451): pid=27620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27621 suid=74 rport=36124 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044250.824:13452): pid=27620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27621 suid=74 rport=36124 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044250.925:13453): pid=27620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36124 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044250.925:13454): pid=27620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36124 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044250.933:13455): pid=27620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044250.934:13456): pid=27620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27621 suid=74 rport=36124 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044250.935:13457): pid=27620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044250.935:13458): pid=27620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044250.935:13459): pid=27620 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=322 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044251.087:13460): pid=27620 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044251.114:13461): pid=27620 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044251.158:13462): pid=27620 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044251.158:13463): pid=27620 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044251.160:13464): pid=27624 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044251.160:13465): pid=27624 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044251.160:13466): pid=27624 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044251.162:13467): pid=27624 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044251.195:13468): pid=27620 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044251.195:13469): pid=27620 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044251.196:13470): pid=27620 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044251.196:13471): pid=27620 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044251.196:13472): pid=27620 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044251.196:13473): pid=27620 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044251.197:13474): pid=27620 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044251.197:13475): pid=27620 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27620 suid=0 rport=36124 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044254.067:13476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044254.067:13477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044254.070:13478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044254.090:13479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044254.244:13480): pid=27654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044254.245:13481): pid=27654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044254.245:13482): pid=27654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044254.248:13483): pid=27653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27654 suid=74 rport=36130 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044254.248:13484): pid=27653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27654 suid=74 rport=36130 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044254.348:13485): pid=27653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36130 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044254.348:13486): pid=27653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36130 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044254.358:13487): pid=27653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044254.360:13488): pid=27653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27654 suid=74 rport=36130 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044254.362:13489): pid=27653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044254.362:13490): pid=27653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044254.362:13491): pid=27653 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=323 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044254.608:13492): pid=27653 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044254.639:13493): pid=27653 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044254.682:13494): pid=27653 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044254.683:13495): pid=27653 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044254.684:13496): pid=27661 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044254.685:13497): pid=27661 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044254.685:13498): pid=27661 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044254.686:13499): pid=27661 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044254.716:13500): pid=27653 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044254.717:13501): pid=27653 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044254.718:13502): pid=27653 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044254.718:13503): pid=27653 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044254.718:13504): pid=27653 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044254.718:13505): pid=27653 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044254.718:13506): pid=27653 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044254.719:13507): pid=27653 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27653 suid=0 rport=36130 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044257.763:13508): pid=27693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27693 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044257.764:13509): pid=27693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27693 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044257.764:13510): pid=27693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27693 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044257.766:13511): pid=27692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27693 suid=74 rport=36134 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044257.766:13512): pid=27692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27693 suid=74 rport=36134 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044257.857:13513): pid=27692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36134 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044257.857:13514): pid=27692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36134 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044257.865:13515): pid=27692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044257.866:13516): pid=27692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27693 suid=74 rport=36134 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044257.868:13517): pid=27692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044257.869:13518): pid=27692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044257.869:13519): pid=27692 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=324 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044258.102:13520): pid=27692 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044258.130:13521): pid=27692 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044258.174:13522): pid=27692 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044258.174:13523): pid=27692 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044258.176:13524): pid=27698 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044258.176:13525): pid=27698 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044258.176:13526): pid=27698 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044258.177:13527): pid=27698 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044258.209:13528): pid=27692 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044258.209:13529): pid=27692 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044258.210:13530): pid=27692 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044258.210:13531): pid=27692 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044258.210:13532): pid=27692 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044258.210:13533): pid=27692 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044258.210:13534): pid=27692 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27692 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044258.210:13535): pid=27692 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27692 suid=0 rport=36134 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044259.318:13536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044259.318:13537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044259.320:13538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044259.336:13539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044261.241:13540): pid=27740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044261.241:13541): pid=27740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044261.241:13542): pid=27740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044261.243:13543): pid=27739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27740 suid=74 rport=36142 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044261.243:13544): pid=27739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27740 suid=74 rport=36142 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044261.343:13545): pid=27739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36142 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044261.344:13546): pid=27739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36142 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044261.352:13547): pid=27739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044261.353:13548): pid=27739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27740 suid=74 rport=36142 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044261.355:13549): pid=27739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044261.355:13550): pid=27739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044261.355:13551): pid=27739 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=325 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044261.516:13552): pid=27739 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044261.546:13553): pid=27739 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044261.592:13554): pid=27739 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044261.592:13555): pid=27739 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044261.595:13556): pid=27773 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044261.595:13557): pid=27773 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044261.595:13558): pid=27773 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044261.597:13559): pid=27773 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044261.625:13560): pid=27739 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044261.625:13561): pid=27739 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044261.626:13562): pid=27739 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044261.626:13563): pid=27739 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044261.626:13564): pid=27739 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044261.626:13565): pid=27739 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044261.626:13566): pid=27739 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044261.626:13567): pid=27739 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27739 suid=0 rport=36142 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044261.861:13568): pid=27782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044261.862:13569): pid=27782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044261.863:13570): pid=27782 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=326 res=1 >type=USER_START msg=audit(1538044261.902:13571): pid=27782 uid=0 auid=163 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044261.903:13572): pid=27782 uid=0 auid=163 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1538044263.782:13573): pid=27782 uid=0 auid=163 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044263.785:13574): pid=27782 uid=0 auid=163 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538044264.567:13575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044264.567:13576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044264.570:13577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044264.591:13578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044264.674:13579): pid=27834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27834 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044264.675:13580): pid=27834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27834 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044264.675:13581): pid=27834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27834 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044264.677:13582): pid=27833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27834 suid=74 rport=36152 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044264.678:13583): pid=27833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27834 suid=74 rport=36152 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044264.736:13584): pid=27833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36152 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044264.736:13585): pid=27833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36152 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044264.743:13586): pid=27833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044264.744:13587): pid=27833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27834 suid=74 rport=36152 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044264.746:13588): pid=27833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044264.746:13589): pid=27833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044264.747:13590): pid=27833 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=327 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044264.984:13591): pid=27833 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044265.014:13592): pid=27833 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044265.059:13593): pid=27833 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044265.059:13594): pid=27833 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044265.062:13595): pid=27836 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044265.062:13596): pid=27836 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044265.062:13597): pid=27836 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044265.064:13598): pid=27836 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044265.094:13599): pid=27833 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044265.095:13600): pid=27833 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044265.096:13601): pid=27833 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044265.096:13602): pid=27833 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044265.096:13603): pid=27833 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044265.096:13604): pid=27833 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044265.096:13605): pid=27833 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044265.097:13606): pid=27833 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27833 suid=0 rport=36152 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044265.679:13607): pid=27845 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044265.679:13608): pid=27845 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044265.680:13609): pid=27845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044265.694:13610): pid=27845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044266.219:13611): pid=27845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044266.219:13612): pid=27845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044266.377:13613): pid=27864 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044266.377:13614): pid=27864 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044266.377:13615): pid=27864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044266.394:13616): pid=27864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044266.875:13617): pid=27864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044266.875:13618): pid=27864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044266.981:13619): pid=27876 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044266.981:13620): pid=27876 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044266.982:13621): pid=27876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044267.001:13622): pid=27876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044267.280:13623): pid=27876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044267.280:13624): pid=27876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044267.419:13625): pid=27889 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044267.419:13626): pid=27889 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044267.419:13627): pid=27889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044267.434:13628): pid=27889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044267.651:13629): pid=27889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044267.651:13630): pid=27889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044268.153:13631): pid=27906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044268.153:13632): pid=27906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044268.154:13633): pid=27906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044268.156:13634): pid=27905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27906 suid=74 rport=36160 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044268.156:13635): pid=27905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27906 suid=74 rport=36160 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044268.246:13636): pid=27905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36160 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044268.246:13637): pid=27905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36160 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044268.254:13638): pid=27905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044268.255:13639): pid=27905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27906 suid=74 rport=36160 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044268.257:13640): pid=27905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044268.257:13641): pid=27905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044268.257:13642): pid=27905 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=328 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044268.423:13643): pid=27905 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044268.441:13644): pid=27905 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044268.483:13645): pid=27905 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044268.483:13646): pid=27905 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044268.486:13647): pid=27909 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044268.486:13648): pid=27909 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044268.486:13649): pid=27909 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044268.488:13650): pid=27909 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044268.518:13651): pid=27905 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044268.518:13652): pid=27905 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044268.519:13653): pid=27905 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044268.519:13654): pid=27905 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044268.519:13655): pid=27905 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044268.519:13656): pid=27905 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044268.519:13657): pid=27905 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044268.519:13658): pid=27905 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27905 suid=0 rport=36160 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044269.818:13659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044269.818:13660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044269.820:13661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044269.836:13662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044271.553:13663): pid=27936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044271.553:13664): pid=27936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044271.553:13665): pid=27936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044271.556:13666): pid=27935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27936 suid=74 rport=36166 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044271.556:13667): pid=27935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27936 suid=74 rport=36166 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044271.617:13668): pid=27935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36166 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044271.617:13669): pid=27935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36166 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044271.625:13670): pid=27935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044271.626:13671): pid=27935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27936 suid=74 rport=36166 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044271.628:13672): pid=27935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044271.628:13673): pid=27935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044271.628:13674): pid=27935 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=329 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044271.795:13675): pid=27935 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044271.816:13676): pid=27935 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044271.859:13677): pid=27935 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044271.859:13678): pid=27935 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044271.861:13679): pid=27942 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044271.861:13680): pid=27942 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044271.861:13681): pid=27942 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044271.862:13682): pid=27942 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044271.884:13683): pid=27935 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044271.884:13684): pid=27935 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044271.884:13685): pid=27935 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044271.885:13686): pid=27935 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044271.885:13687): pid=27935 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044271.885:13688): pid=27935 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044271.885:13689): pid=27935 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044271.885:13690): pid=27935 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27935 suid=0 rport=36166 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044274.937:13691): pid=27971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044274.937:13692): pid=27971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044274.938:13693): pid=27971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044274.939:13694): pid=27970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27971 suid=74 rport=36182 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044274.940:13695): pid=27970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27971 suid=74 rport=36182 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044274.997:13696): pid=27970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36182 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044274.997:13697): pid=27970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36182 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044275.004:13698): pid=27970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044275.004:13699): pid=27970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27971 suid=74 rport=36182 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044275.006:13700): pid=27970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044275.006:13701): pid=27970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044275.006:13702): pid=27970 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=330 res=1 >type=SERVICE_START msg=audit(1538044275.068:13703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044275.068:13704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044275.070:13705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044275.089:13706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538044275.173:13707): pid=27970 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044275.190:13708): pid=27970 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044275.232:13709): pid=27970 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044275.232:13710): pid=27970 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044275.234:13711): pid=27976 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044275.234:13712): pid=27976 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044275.234:13713): pid=27976 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044275.235:13714): pid=27976 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044275.263:13715): pid=27970 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044275.263:13716): pid=27970 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044275.264:13717): pid=27970 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044275.264:13718): pid=27970 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044275.264:13719): pid=27970 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044275.264:13720): pid=27970 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044275.264:13721): pid=27970 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044275.264:13722): pid=27970 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27970 suid=0 rport=36182 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044278.307:13723): pid=27999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044278.308:13724): pid=27999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044278.308:13725): pid=27999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044278.310:13726): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27999 suid=74 rport=36190 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044278.310:13727): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=27999 suid=74 rport=36190 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044278.367:13728): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36190 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044278.367:13729): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36190 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044278.377:13730): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044278.378:13731): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27999 suid=74 rport=36190 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044278.380:13732): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044278.380:13733): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044278.380:13734): pid=27998 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=331 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044278.543:13735): pid=27998 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044278.560:13736): pid=27998 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044278.605:13737): pid=27998 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044278.605:13738): pid=27998 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044278.608:13739): pid=28001 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=28001 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044278.608:13740): pid=28001 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=28001 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044278.608:13741): pid=28001 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=28001 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044278.609:13742): pid=28001 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044278.641:13743): pid=27998 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044278.642:13744): pid=27998 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044278.643:13745): pid=27998 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044278.643:13746): pid=27998 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044278.643:13747): pid=27998 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=27998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044278.643:13748): pid=27998 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=27998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044278.644:13749): pid=27998 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=27998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044278.644:13750): pid=27998 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27998 suid=0 rport=36190 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044280.317:13751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044280.317:13752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044280.321:13753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044280.332:13754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044281.694:13755): pid=28028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=28028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044281.694:13756): pid=28028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=28028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044281.694:13757): pid=28028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=28028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044281.696:13758): pid=28027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=28028 suid=74 rport=36200 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044281.696:13759): pid=28027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=28028 suid=74 rport=36200 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044281.759:13760): pid=28027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36200 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044281.759:13761): pid=28027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36200 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044281.770:13762): pid=28027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044281.770:13763): pid=28027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28028 suid=74 rport=36200 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044281.772:13764): pid=28027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044281.773:13765): pid=28027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044281.773:13766): pid=28027 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=332 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044281.968:13767): pid=28027 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044281.993:13768): pid=28027 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044282.036:13769): pid=28027 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044282.036:13770): pid=28027 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044282.039:13771): pid=28030 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=28030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044282.039:13772): pid=28030 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=28030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044282.039:13773): pid=28030 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=28030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044282.040:13774): pid=28030 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044282.072:13775): pid=28027 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044282.072:13776): pid=28027 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044282.073:13777): pid=28027 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044282.073:13778): pid=28027 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044282.073:13779): pid=28027 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=28027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044282.073:13780): pid=28027 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=28027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044282.073:13781): pid=28027 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=28027 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044282.073:13782): pid=28027 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28027 suid=0 rport=36200 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044285.130:13783): pid=28049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=28049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044285.131:13784): pid=28049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=28049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044285.131:13785): pid=28049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=28049 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044285.134:13786): pid=28048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=28049 suid=74 rport=36212 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044285.134:13787): pid=28048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=28049 suid=74 rport=36212 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044285.233:13788): pid=28048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36212 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044285.234:13789): pid=28048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36212 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044285.243:13790): pid=28048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044285.244:13791): pid=28048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28049 suid=74 rport=36212 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044285.246:13792): pid=28048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044285.246:13793): pid=28048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044285.246:13794): pid=28048 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=333 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044285.414:13795): pid=28048 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538044285.423:13796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044285.423:13797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044285.428:13798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044285.459:13799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538044285.465:13800): pid=28048 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044285.508:13801): pid=28048 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044285.509:13802): pid=28048 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044285.512:13803): pid=28055 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=28055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044285.512:13804): pid=28055 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=28055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044285.513:13805): pid=28055 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=28055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044285.514:13806): pid=28055 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044285.552:13807): pid=28048 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044285.552:13808): pid=28048 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044285.553:13809): pid=28048 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044285.553:13810): pid=28048 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044285.553:13811): pid=28048 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=28048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044285.554:13812): pid=28048 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=28048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044285.554:13813): pid=28048 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=28048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044285.554:13814): pid=28048 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28048 suid=0 rport=36212 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044286.308:13815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-ceilometer-notification comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044286.918:13816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-account-reaper comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044287.582:13817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-container-updater comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044288.343:13818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-container-sync comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044288.616:13819): pid=28332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=28332 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044288.616:13820): pid=28332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=28332 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044288.617:13821): pid=28332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=28332 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044288.620:13822): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=28332 suid=74 rport=36214 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044288.620:13823): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=28332 suid=74 rport=36214 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044288.720:13824): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36214 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044288.720:13825): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36214 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044288.728:13826): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044288.729:13827): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28332 suid=74 rport=36214 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044288.734:13828): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044288.734:13829): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044288.734:13830): pid=28330 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=334 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044288.975:13831): pid=28330 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044289.008:13832): pid=28330 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044289.050:13833): pid=28330 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044289.050:13834): pid=28330 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044289.051:13835): pid=28402 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=28402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044289.051:13836): pid=28402 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=28402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044289.051:13837): pid=28402 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=28402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044289.052:13838): pid=28402 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044289.168:13839): pid=28330 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044289.168:13840): pid=28330 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044289.169:13841): pid=28330 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044289.169:13842): pid=28330 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044289.169:13843): pid=28330 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=28330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044289.169:13844): pid=28330 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=28330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044289.169:13845): pid=28330 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=28330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044289.169:13846): pid=28330 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28330 suid=0 rport=36214 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044289.193:13847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-object-updater comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044289.978:13848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-object-reconstructor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044290.834:13849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-account comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044291.609:13850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-account-replicator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044292.209:13851): pid=28701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=28701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044292.209:13852): pid=28701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=28701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044292.209:13853): pid=28701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=28701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044292.213:13854): pid=28700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=28701 suid=74 rport=36552 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044292.213:13855): pid=28700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=28701 suid=74 rport=36552 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044292.317:13856): pid=28700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36552 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044292.317:13857): pid=28700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=36552 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044292.331:13858): pid=28700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044292.333:13859): pid=28700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28701 suid=74 rport=36552 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044292.335:13860): pid=28700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044292.335:13861): pid=28700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044292.335:13862): pid=28700 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=335 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044292.587:13863): pid=28700 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538044292.680:13864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-account-auditor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044292.939:13865): pid=28700 uid=0 auid=0 ses=335 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044292.985:13866): pid=28700 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044292.985:13867): pid=28700 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044292.986:13868): pid=28760 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=28760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044292.986:13869): pid=28760 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=28760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044292.986:13870): pid=28760 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=28760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044292.988:13871): pid=28760 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044293.119:13872): pid=28700 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044293.120:13873): pid=28700 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044293.120:13874): pid=28700 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044293.120:13875): pid=28700 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044293.120:13876): pid=28700 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=28700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044293.120:13877): pid=28700 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=28700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044293.120:13878): pid=28700 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=28700 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044293.120:13879): pid=28700 uid=0 auid=0 ses=335 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28700 suid=0 rport=36552 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044293.521:13880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-container comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044294.376:13881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-container-replicator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044295.271:13882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-container-auditor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044296.114:13883): pid=29077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044296.114:13884): pid=29077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044296.115:13885): pid=29077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044296.118:13886): pid=29070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29077 suid=74 rport=37242 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044296.118:13887): pid=29070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29077 suid=74 rport=37242 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044296.139:13888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-object comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538044296.221:13889): pid=29070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37242 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044296.222:13890): pid=29070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37242 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044296.230:13891): pid=29070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044296.231:13892): pid=29070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29077 suid=74 rport=37242 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044296.234:13893): pid=29070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044296.234:13894): pid=29070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044296.234:13895): pid=29070 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=336 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044296.481:13896): pid=29070 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044296.564:13897): pid=29070 uid=0 auid=0 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044296.609:13898): pid=29070 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044296.609:13899): pid=29070 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044296.611:13900): pid=29129 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044296.612:13901): pid=29129 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044296.612:13902): pid=29129 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29129 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044296.613:13903): pid=29129 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044296.683:13904): pid=29070 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044296.683:13905): pid=29070 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044296.684:13906): pid=29070 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044296.684:13907): pid=29070 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044296.684:13908): pid=29070 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044296.685:13909): pid=29070 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044296.685:13910): pid=29070 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044296.685:13911): pid=29070 uid=0 auid=0 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29070 suid=0 rport=37242 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044296.874:13912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-object-replicator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044297.568:13913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-swift-object-auditor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044299.704:13914): pid=29329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29329 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044299.704:13915): pid=29329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29329 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044299.704:13916): pid=29329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29329 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044299.708:13917): pid=29328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29329 suid=74 rport=37244 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044299.708:13918): pid=29328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29329 suid=74 rport=37244 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044299.809:13919): pid=29328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37244 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044299.809:13920): pid=29328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37244 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044299.819:13921): pid=29328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044299.820:13922): pid=29328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29329 suid=74 rport=37244 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044299.822:13923): pid=29328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044299.823:13924): pid=29328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044299.823:13925): pid=29328 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=337 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044300.017:13926): pid=29328 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044300.034:13927): pid=29328 uid=0 auid=0 ses=337 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044300.077:13928): pid=29328 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044300.077:13929): pid=29328 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044300.080:13930): pid=29332 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29332 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044300.080:13931): pid=29332 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29332 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044300.080:13932): pid=29332 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29332 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044300.081:13933): pid=29332 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044300.111:13934): pid=29328 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044300.111:13935): pid=29328 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044300.112:13936): pid=29328 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044300.112:13937): pid=29328 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044300.112:13938): pid=29328 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044300.112:13939): pid=29328 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044300.112:13940): pid=29328 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044300.112:13941): pid=29328 uid=0 auid=0 ses=337 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29328 suid=0 rport=37244 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044303.143:13942): pid=29342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044303.143:13943): pid=29342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044303.143:13944): pid=29342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044303.146:13945): pid=29341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29342 suid=74 rport=37246 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044303.146:13946): pid=29341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29342 suid=74 rport=37246 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044303.225:13947): pid=29341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37246 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044303.225:13948): pid=29341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37246 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044303.233:13949): pid=29341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044303.233:13950): pid=29341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29342 suid=74 rport=37246 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044303.235:13951): pid=29341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044303.236:13952): pid=29341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044303.236:13953): pid=29341 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=338 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044303.467:13954): pid=29341 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044303.498:13955): pid=29341 uid=0 auid=0 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044303.542:13956): pid=29341 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044303.542:13957): pid=29341 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044303.545:13958): pid=29345 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044303.545:13959): pid=29345 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044303.546:13960): pid=29345 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044303.547:13961): pid=29345 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044303.582:13962): pid=29341 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044303.582:13963): pid=29341 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044303.583:13964): pid=29341 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044303.584:13965): pid=29341 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044303.584:13966): pid=29341 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044303.584:13967): pid=29341 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044303.584:13968): pid=29341 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044303.584:13969): pid=29341 uid=0 auid=0 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29341 suid=0 rport=37246 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044303.818:13970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044303.818:13971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044303.820:13972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044304.014:13973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044306.642:13974): pid=29370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044306.643:13975): pid=29370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044306.643:13976): pid=29370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29370 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044306.646:13977): pid=29369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29370 suid=74 rport=37264 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044306.646:13978): pid=29369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29370 suid=74 rport=37264 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044306.737:13979): pid=29369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37264 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044306.737:13980): pid=29369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37264 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044306.748:13981): pid=29369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044306.749:13982): pid=29369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29370 suid=74 rport=37264 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044306.752:13983): pid=29369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044306.752:13984): pid=29369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044306.752:13985): pid=29369 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=339 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044306.929:13986): pid=29369 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044306.947:13987): pid=29369 uid=0 auid=0 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044306.989:13988): pid=29369 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044306.989:13989): pid=29369 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044306.991:13990): pid=29373 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044306.992:13991): pid=29373 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044306.992:13992): pid=29373 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044306.993:13993): pid=29373 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044307.027:13994): pid=29369 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044307.027:13995): pid=29369 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044307.027:13996): pid=29369 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044307.027:13997): pid=29369 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044307.027:13998): pid=29369 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044307.028:13999): pid=29369 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044307.028:14000): pid=29369 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044307.028:14001): pid=29369 uid=0 auid=0 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29369 suid=0 rport=37264 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044309.067:14002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044309.068:14003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044309.069:14004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044309.086:14005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044310.082:14006): pid=29386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044310.082:14007): pid=29386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044310.082:14008): pid=29386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044310.085:14009): pid=29385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29386 suid=74 rport=37266 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044310.085:14010): pid=29385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29386 suid=74 rport=37266 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044310.186:14011): pid=29385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37266 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044310.186:14012): pid=29385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37266 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044310.195:14013): pid=29385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044310.196:14014): pid=29385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29386 suid=74 rport=37266 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044310.199:14015): pid=29385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044310.199:14016): pid=29385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044310.199:14017): pid=29385 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=340 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044310.436:14018): pid=29385 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044310.459:14019): pid=29385 uid=0 auid=0 ses=340 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044310.503:14020): pid=29385 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044310.503:14021): pid=29385 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044310.506:14022): pid=29389 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044310.506:14023): pid=29389 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044310.506:14024): pid=29389 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044310.508:14025): pid=29389 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044310.540:14026): pid=29385 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044310.541:14027): pid=29385 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044310.542:14028): pid=29385 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044310.542:14029): pid=29385 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044310.542:14030): pid=29385 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044310.542:14031): pid=29385 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044310.542:14032): pid=29385 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044310.543:14033): pid=29385 uid=0 auid=0 ses=340 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29385 suid=0 rport=37266 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044313.602:14034): pid=29401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044313.603:14035): pid=29401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044313.603:14036): pid=29401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044313.606:14037): pid=29398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29401 suid=74 rport=37268 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044313.606:14038): pid=29398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29401 suid=74 rport=37268 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044313.699:14039): pid=29398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37268 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044313.699:14040): pid=29398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37268 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044313.709:14041): pid=29398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044313.710:14042): pid=29398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29401 suid=74 rport=37268 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044313.713:14043): pid=29398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044313.713:14044): pid=29398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044313.713:14045): pid=29398 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=341 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044313.947:14046): pid=29398 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044313.971:14047): pid=29398 uid=0 auid=0 ses=341 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044314.015:14048): pid=29398 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044314.015:14049): pid=29398 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044314.018:14050): pid=29404 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044314.018:14051): pid=29404 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044314.018:14052): pid=29404 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29404 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044314.020:14053): pid=29404 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044314.054:14054): pid=29398 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044314.055:14055): pid=29398 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044314.056:14056): pid=29398 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044314.056:14057): pid=29398 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044314.056:14058): pid=29398 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044314.056:14059): pid=29398 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044314.056:14060): pid=29398 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29398 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044314.056:14061): pid=29398 uid=0 auid=0 ses=341 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29398 suid=0 rport=37268 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044314.317:14062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044314.317:14063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044314.320:14064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044314.336:14065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044317.107:14066): pid=29417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044317.108:14067): pid=29417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044317.108:14068): pid=29417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044317.111:14069): pid=29416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29417 suid=74 rport=37270 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044317.111:14070): pid=29416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29417 suid=74 rport=37270 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044317.183:14071): pid=29416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37270 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044317.184:14072): pid=29416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37270 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044317.193:14073): pid=29416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044317.194:14074): pid=29416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29417 suid=74 rport=37270 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044317.197:14075): pid=29416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044317.198:14076): pid=29416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044317.198:14077): pid=29416 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=342 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044317.436:14078): pid=29416 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044317.458:14079): pid=29416 uid=0 auid=0 ses=342 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044317.501:14080): pid=29416 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044317.501:14081): pid=29416 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044317.504:14082): pid=29420 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044317.504:14083): pid=29420 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044317.504:14084): pid=29420 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044317.505:14085): pid=29420 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044317.545:14086): pid=29416 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044317.545:14087): pid=29416 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044317.546:14088): pid=29416 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044317.546:14089): pid=29416 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044317.546:14090): pid=29416 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044317.546:14091): pid=29416 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044317.547:14092): pid=29416 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29416 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044317.547:14093): pid=29416 uid=0 auid=0 ses=342 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29416 suid=0 rport=37270 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044319.568:14094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044319.568:14095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044319.570:14096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044319.586:14097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044320.609:14098): pid=29433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29433 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044320.609:14099): pid=29433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29433 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044320.609:14100): pid=29433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29433 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044320.612:14101): pid=29432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29433 suid=74 rport=37272 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044320.613:14102): pid=29432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29433 suid=74 rport=37272 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044320.704:14103): pid=29432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37272 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044320.704:14104): pid=29432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37272 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044320.714:14105): pid=29432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044320.715:14106): pid=29432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29433 suid=74 rport=37272 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044320.718:14107): pid=29432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044320.718:14108): pid=29432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044320.719:14109): pid=29432 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=343 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044320.953:14110): pid=29432 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044320.977:14111): pid=29432 uid=0 auid=0 ses=343 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044321.022:14112): pid=29432 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044321.022:14113): pid=29432 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044321.025:14114): pid=29436 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044321.025:14115): pid=29436 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044321.026:14116): pid=29436 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044321.027:14117): pid=29436 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044321.059:14118): pid=29432 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044321.060:14119): pid=29432 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044321.061:14120): pid=29432 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044321.061:14121): pid=29432 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044321.061:14122): pid=29432 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044321.061:14123): pid=29432 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044321.061:14124): pid=29432 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29432 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044321.062:14125): pid=29432 uid=0 auid=0 ses=343 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29432 suid=0 rport=37272 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044321.807:14126): pid=29440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044321.807:14127): pid=29440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044321.808:14128): pid=29440 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=344 res=1 >type=USER_START msg=audit(1538044321.836:14129): pid=29440 uid=0 auid=163 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044321.837:14130): pid=29440 uid=0 auid=163 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538044324.114:14131): pid=29493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044324.114:14132): pid=29493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044324.114:14133): pid=29493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044324.117:14134): pid=29492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29493 suid=74 rport=37274 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044324.118:14135): pid=29492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29493 suid=74 rport=37274 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044324.217:14136): pid=29492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37274 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044324.217:14137): pid=29492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37274 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044324.226:14138): pid=29492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044324.226:14139): pid=29492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29493 suid=74 rport=37274 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044324.229:14140): pid=29492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044324.229:14141): pid=29492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044324.229:14142): pid=29492 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=345 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044324.467:14143): pid=29492 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044324.501:14144): pid=29492 uid=0 auid=0 ses=345 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044324.544:14145): pid=29492 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044324.545:14146): pid=29492 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044324.548:14147): pid=29496 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29496 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044324.548:14148): pid=29496 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29496 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044324.548:14149): pid=29496 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29496 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044324.550:14150): pid=29496 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044324.588:14151): pid=29492 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044324.588:14152): pid=29492 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044324.589:14153): pid=29492 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044324.589:14154): pid=29492 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044324.590:14155): pid=29492 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044324.590:14156): pid=29492 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044324.590:14157): pid=29492 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044324.590:14158): pid=29492 uid=0 auid=0 ses=345 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29492 suid=0 rport=37274 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044324.597:14159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044324.597:14160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044324.599:14161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044324.617:14162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRED_DISP msg=audit(1538044325.333:14163): pid=29440 uid=0 auid=163 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044325.340:14164): pid=29440 uid=0 auid=163 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1538044325.684:14165): pid=29506 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044325.685:14166): pid=29506 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044325.685:14167): pid=29506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044325.708:14168): pid=29506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044326.249:14169): pid=29506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044326.249:14170): pid=29506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044326.382:14171): pid=29514 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044326.383:14172): pid=29514 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044326.383:14173): pid=29514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044326.401:14174): pid=29514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044326.938:14175): pid=29514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044326.938:14176): pid=29514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044327.096:14177): pid=29523 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044327.096:14178): pid=29523 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044327.096:14179): pid=29523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044327.114:14180): pid=29523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044327.606:14181): pid=29523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044327.607:14182): pid=29523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044327.647:14183): pid=29537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044327.648:14184): pid=29537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044327.648:14185): pid=29537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044327.651:14186): pid=29536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29537 suid=74 rport=37278 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044327.651:14187): pid=29536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29537 suid=74 rport=37278 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044327.752:14188): pid=29536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37278 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044327.752:14189): pid=29536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37278 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044327.761:14190): pid=29536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044327.762:14191): pid=29536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29537 suid=74 rport=37278 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044327.764:14192): pid=29536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044327.764:14193): pid=29536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044327.764:14194): pid=29536 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=346 res=1 >type=USER_ACCT msg=audit(1538044327.774:14195): pid=29535 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044327.774:14196): pid=29535 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044327.775:14197): pid=29535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044327.788:14198): pid=29535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538044327.926:14199): pid=29536 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044327.949:14200): pid=29536 uid=0 auid=0 ses=346 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044327.995:14201): pid=29536 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044327.995:14202): pid=29536 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044327.998:14203): pid=29545 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044327.998:14204): pid=29545 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044327.998:14205): pid=29545 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044328.000:14206): pid=29545 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044328.039:14207): pid=29536 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044328.039:14208): pid=29536 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044328.040:14209): pid=29536 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044328.041:14210): pid=29536 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044328.041:14211): pid=29536 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044328.041:14212): pid=29536 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044328.041:14213): pid=29536 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044328.041:14214): pid=29536 uid=0 auid=0 ses=346 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29536 suid=0 rport=37278 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_END msg=audit(1538044328.053:14215): pid=29535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044328.054:14216): pid=29535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044329.818:14217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044329.818:14218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044329.820:14219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044329.838:14220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044331.081:14221): pid=29563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044331.081:14222): pid=29563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044331.082:14223): pid=29563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044331.084:14224): pid=29561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29563 suid=74 rport=37280 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044331.084:14225): pid=29561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29563 suid=74 rport=37280 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044331.185:14226): pid=29561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37280 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044331.185:14227): pid=29561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37280 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044331.194:14228): pid=29561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044331.194:14229): pid=29561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29563 suid=74 rport=37280 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044331.197:14230): pid=29561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044331.197:14231): pid=29561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044331.197:14232): pid=29561 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=347 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044331.433:14233): pid=29561 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044331.462:14234): pid=29561 uid=0 auid=0 ses=347 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044331.505:14235): pid=29561 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044331.505:14236): pid=29561 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044331.508:14237): pid=29565 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044331.508:14238): pid=29565 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044331.508:14239): pid=29565 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044331.509:14240): pid=29565 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044331.544:14241): pid=29561 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044331.545:14242): pid=29561 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044331.546:14243): pid=29561 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044331.546:14244): pid=29561 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044331.546:14245): pid=29561 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044331.546:14246): pid=29561 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044331.546:14247): pid=29561 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044331.547:14248): pid=29561 uid=0 auid=0 ses=347 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29561 suid=0 rport=37280 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044334.593:14249): pid=29577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044334.594:14250): pid=29577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044334.594:14251): pid=29577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044334.596:14252): pid=29576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29577 suid=74 rport=37282 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044334.596:14253): pid=29576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29577 suid=74 rport=37282 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044334.696:14254): pid=29576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37282 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044334.696:14255): pid=29576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37282 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044334.705:14256): pid=29576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044334.706:14257): pid=29576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29577 suid=74 rport=37282 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044334.708:14258): pid=29576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044334.708:14259): pid=29576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044334.709:14260): pid=29576 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=348 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044334.941:14261): pid=29576 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538044334.949:14262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044334.949:14263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044334.952:14264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044334.963:14265): pid=29576 uid=0 auid=0 ses=348 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_STOP msg=audit(1538044334.975:14266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_LOGIN msg=audit(1538044335.006:14267): pid=29576 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044335.006:14268): pid=29576 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044335.009:14269): pid=29583 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29583 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044335.009:14270): pid=29583 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29583 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044335.009:14271): pid=29583 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29583 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044335.011:14272): pid=29583 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044335.044:14273): pid=29576 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044335.044:14274): pid=29576 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044335.044:14275): pid=29576 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044335.045:14276): pid=29576 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044335.045:14277): pid=29576 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044335.045:14278): pid=29576 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044335.045:14279): pid=29576 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044335.045:14280): pid=29576 uid=0 auid=0 ses=348 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29576 suid=0 rport=37282 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044338.096:14281): pid=29593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044338.097:14282): pid=29593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044338.097:14283): pid=29593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044338.099:14284): pid=29592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29593 suid=74 rport=37284 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044338.100:14285): pid=29592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29593 suid=74 rport=37284 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044338.199:14286): pid=29592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37284 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044338.199:14287): pid=29592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37284 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044338.209:14288): pid=29592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044338.210:14289): pid=29592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29593 suid=74 rport=37284 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044338.212:14290): pid=29592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044338.212:14291): pid=29592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044338.212:14292): pid=29592 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=349 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044338.446:14293): pid=29592 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044338.473:14294): pid=29592 uid=0 auid=0 ses=349 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044338.517:14295): pid=29592 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044338.517:14296): pid=29592 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044338.520:14297): pid=29596 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044338.520:14298): pid=29596 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044338.520:14299): pid=29596 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044338.521:14300): pid=29596 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044338.555:14301): pid=29592 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044338.555:14302): pid=29592 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044338.556:14303): pid=29592 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044338.556:14304): pid=29592 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044338.557:14305): pid=29592 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044338.557:14306): pid=29592 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044338.557:14307): pid=29592 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044338.557:14308): pid=29592 uid=0 auid=0 ses=349 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29592 suid=0 rport=37284 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044340.067:14309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044340.067:14310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044340.069:14311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044340.085:14312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044341.604:14313): pid=29609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044341.604:14314): pid=29609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044341.604:14315): pid=29609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044341.607:14316): pid=29608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29609 suid=74 rport=37286 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044341.607:14317): pid=29608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29609 suid=74 rport=37286 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044341.708:14318): pid=29608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37286 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044341.708:14319): pid=29608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37286 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044341.717:14320): pid=29608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044341.718:14321): pid=29608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29609 suid=74 rport=37286 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044341.720:14322): pid=29608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044341.720:14323): pid=29608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044341.721:14324): pid=29608 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=350 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044341.958:14325): pid=29608 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044341.987:14326): pid=29608 uid=0 auid=0 ses=350 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044342.031:14327): pid=29608 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044342.031:14328): pid=29608 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044342.034:14329): pid=29612 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044342.034:14330): pid=29612 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044342.034:14331): pid=29612 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044342.036:14332): pid=29612 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044342.068:14333): pid=29608 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044342.068:14334): pid=29608 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044342.069:14335): pid=29608 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044342.069:14336): pid=29608 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044342.070:14337): pid=29608 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044342.070:14338): pid=29608 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044342.070:14339): pid=29608 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044342.070:14340): pid=29608 uid=0 auid=0 ses=350 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29608 suid=0 rport=37286 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044345.119:14341): pid=29624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044345.119:14342): pid=29624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044345.119:14343): pid=29624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044345.122:14344): pid=29623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29624 suid=74 rport=37288 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044345.122:14345): pid=29623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29624 suid=74 rport=37288 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044345.222:14346): pid=29623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37288 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044345.222:14347): pid=29623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37288 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044345.231:14348): pid=29623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044345.232:14349): pid=29623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29624 suid=74 rport=37288 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044345.234:14350): pid=29623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044345.235:14351): pid=29623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044345.235:14352): pid=29623 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=351 res=1 >type=SERVICE_START msg=audit(1538044345.319:14353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044345.319:14354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044345.323:14355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044345.349:14356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538044345.467:14357): pid=29623 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044345.499:14358): pid=29623 uid=0 auid=0 ses=351 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044345.544:14359): pid=29623 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044345.544:14360): pid=29623 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044345.547:14361): pid=29630 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044345.548:14362): pid=29630 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044345.548:14363): pid=29630 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044345.550:14364): pid=29630 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044345.585:14365): pid=29623 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044345.585:14366): pid=29623 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044345.586:14367): pid=29623 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044345.587:14368): pid=29623 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044345.587:14369): pid=29623 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044345.587:14370): pid=29623 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044345.587:14371): pid=29623 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044345.587:14372): pid=29623 uid=0 auid=0 ses=351 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29623 suid=0 rport=37288 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044348.636:14373): pid=29640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044348.637:14374): pid=29640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044348.637:14375): pid=29640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044348.640:14376): pid=29639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29640 suid=74 rport=37290 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044348.640:14377): pid=29639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29640 suid=74 rport=37290 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044348.720:14378): pid=29639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37290 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044348.720:14379): pid=29639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37290 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044348.730:14380): pid=29639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044348.730:14381): pid=29639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29640 suid=74 rport=37290 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044348.732:14382): pid=29639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044348.733:14383): pid=29639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044348.733:14384): pid=29639 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=352 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044348.970:14385): pid=29639 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044349.003:14386): pid=29639 uid=0 auid=0 ses=352 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044349.048:14387): pid=29639 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044349.048:14388): pid=29639 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044349.051:14389): pid=29643 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044349.051:14390): pid=29643 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044349.051:14391): pid=29643 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044349.053:14392): pid=29643 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044349.095:14393): pid=29639 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044349.095:14394): pid=29639 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044349.096:14395): pid=29639 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044349.096:14396): pid=29639 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044349.097:14397): pid=29639 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044349.097:14398): pid=29639 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044349.097:14399): pid=29639 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044349.098:14400): pid=29639 uid=0 auid=0 ses=352 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29639 suid=0 rport=37290 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044350.567:14401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044350.568:14402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044350.569:14403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044350.588:14404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044352.152:14405): pid=29714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044352.153:14406): pid=29714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044352.153:14407): pid=29714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044352.155:14408): pid=29713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29714 suid=74 rport=37632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044352.156:14409): pid=29713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29714 suid=74 rport=37632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044352.255:14410): pid=29713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=37632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044352.255:14411): pid=29713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=37632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044352.264:14412): pid=29713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044352.265:14413): pid=29713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29714 suid=74 rport=37632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044352.266:14414): pid=29713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044352.267:14415): pid=29713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044352.267:14416): pid=29713 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=353 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044352.508:14417): pid=29713 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044352.558:14418): pid=29713 uid=0 auid=0 ses=353 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044352.602:14419): pid=29713 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044352.602:14420): pid=29713 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044352.605:14421): pid=29717 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044352.605:14422): pid=29717 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044352.605:14423): pid=29717 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044352.607:14424): pid=29717 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044352.714:14425): pid=29713 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044352.715:14426): pid=29713 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044352.716:14427): pid=29713 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044352.716:14428): pid=29713 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044352.716:14429): pid=29713 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044352.716:14430): pid=29713 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044352.716:14431): pid=29713 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044352.717:14432): pid=29713 uid=0 auid=0 ses=353 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29713 suid=0 rport=37632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044355.817:14433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044355.817:14434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044355.818:14435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044355.841:14436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044356.118:14437): pid=29732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.118:14438): pid=29732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.118:14439): pid=29732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044356.121:14440): pid=29731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29732 suid=74 rport=38318 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044356.121:14441): pid=29731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29732 suid=74 rport=38318 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044356.177:14442): pid=29731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38318 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044356.177:14443): pid=29731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38318 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044356.185:14444): pid=29731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.185:14445): pid=29731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29732 suid=74 rport=38318 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044356.186:14446): pid=29731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044356.187:14447): pid=29731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044356.187:14448): pid=29731 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=354 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044356.348:14449): pid=29731 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044356.374:14450): pid=29731 uid=0 auid=0 ses=354 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044356.419:14451): pid=29731 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044356.419:14452): pid=29731 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.421:14453): pid=29734 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.421:14454): pid=29734 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.421:14455): pid=29734 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044356.423:14456): pid=29734 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044356.449:14457): pid=29731 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044356.449:14458): pid=29731 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044356.450:14459): pid=29731 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044356.450:14460): pid=29731 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.450:14461): pid=29731 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.451:14462): pid=29731 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.451:14463): pid=29731 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.451:14464): pid=29731 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29731 suid=0 rport=38318 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.474:14465): pid=29747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.474:14466): pid=29747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.474:14467): pid=29747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044356.476:14468): pid=29746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29747 suid=74 rport=38320 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044356.476:14469): pid=29746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29747 suid=74 rport=38320 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044356.534:14470): pid=29746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38320 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044356.534:14471): pid=29746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38320 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044356.543:14472): pid=29746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.543:14473): pid=29746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29747 suid=74 rport=38320 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044356.546:14474): pid=29746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044356.546:14475): pid=29746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044356.546:14476): pid=29746 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=355 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044356.711:14477): pid=29746 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044356.730:14478): pid=29746 uid=0 auid=0 ses=355 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044356.773:14479): pid=29746 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044356.773:14480): pid=29746 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.776:14481): pid=29749 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.777:14482): pid=29749 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.777:14483): pid=29749 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044356.779:14484): pid=29749 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044356.805:14485): pid=29746 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044356.806:14486): pid=29746 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044356.807:14487): pid=29746 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044356.807:14488): pid=29746 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.807:14489): pid=29746 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.807:14490): pid=29746 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.808:14491): pid=29746 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044356.808:14492): pid=29746 uid=0 auid=0 ses=355 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29746 suid=0 rport=38320 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044359.854:14493): pid=29811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044359.854:14494): pid=29811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044359.854:14495): pid=29811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044359.857:14496): pid=29810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29811 suid=74 rport=38364 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044359.857:14497): pid=29810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=29811 suid=74 rport=38364 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044359.926:14498): pid=29810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38364 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044359.926:14499): pid=29810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38364 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044359.934:14500): pid=29810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044359.935:14501): pid=29810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29811 suid=74 rport=38364 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044359.936:14502): pid=29810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044359.937:14503): pid=29810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044359.937:14504): pid=29810 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=356 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044360.173:14505): pid=29810 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044360.209:14506): pid=29810 uid=0 auid=0 ses=356 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044360.252:14507): pid=29810 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044360.252:14508): pid=29810 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044360.253:14509): pid=29827 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29827 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044360.253:14510): pid=29827 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29827 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044360.254:14511): pid=29827 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29827 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044360.255:14512): pid=29827 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044360.280:14513): pid=29810 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044360.281:14514): pid=29810 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044360.281:14515): pid=29810 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044360.281:14516): pid=29810 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044360.281:14517): pid=29810 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=29810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044360.281:14518): pid=29810 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=29810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044360.281:14519): pid=29810 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=29810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044360.281:14520): pid=29810 uid=0 auid=0 ses=356 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29810 suid=0 rport=38364 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044361.068:14521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044361.068:14522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044361.070:14523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044361.086:14524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538044362.995:14525): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044362.995:14525): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1538044362.995:14525): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffe628c6360 items=0 ppid=29973 pid=29980 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=354 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044362.995:14525): proctitle=6970006E65746E730061646400746573746E732D31303234333138323434 >type=NETFILTER_CFG msg=audit(1538044363.079:14526): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044363.079:14526): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1538044363.079:14526): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffcb23266e0 items=0 ppid=29973 pid=29987 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=354 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044363.079:14526): proctitle=6970006E65746E730061646400746573746E732D373337393832373934 >type=NETFILTER_CFG msg=audit(1538044363.213:14527): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044363.213:14527): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1538044363.213:14527): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff30904f60 items=0 ppid=29973 pid=29992 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=354 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044363.213:14527): proctitle=6970006E65746E730061646400746573746E732D363637373530383835 >type=CRYPTO_KEY_USER msg=audit(1538044363.321:14528): pid=30008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044363.322:14529): pid=30008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044363.322:14530): pid=30008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30008 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044363.325:14531): pid=30006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30008 suid=74 rport=38380 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044363.325:14532): pid=30006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30008 suid=74 rport=38380 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044363.394:14533): pid=30006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38380 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044363.394:14534): pid=30006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38380 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044363.402:14535): pid=30006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044363.403:14536): pid=30006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30008 suid=74 rport=38380 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044363.405:14537): pid=30006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044363.405:14538): pid=30006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044363.405:14539): pid=30006 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=357 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044363.567:14540): pid=30006 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044363.595:14541): pid=30006 uid=0 auid=0 ses=357 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044363.636:14542): pid=30006 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044363.636:14543): pid=30006 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044363.637:14544): pid=30018 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044363.637:14545): pid=30018 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044363.637:14546): pid=30018 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044363.639:14547): pid=30018 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044363.670:14548): pid=30006 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044363.670:14549): pid=30006 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044363.670:14550): pid=30006 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044363.670:14551): pid=30006 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044363.671:14552): pid=30006 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30006 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044363.671:14553): pid=30006 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30006 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044363.671:14554): pid=30006 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30006 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044363.671:14555): pid=30006 uid=0 auid=0 ses=357 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30006 suid=0 rport=38380 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044364.919:14556): pid=30073 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=pam_rootok acct="rabbitmq" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044364.920:14557): pid=30073 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_succeed_if acct="rabbitmq" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' >type=CRED_ACQ msg=audit(1538044364.920:14558): pid=30073 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_rootok acct="rabbitmq" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044364.927:14559): pid=30073 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_limits,pam_systemd,pam_unix,pam_xauth acct="rabbitmq" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044366.111:14560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044366.111:14561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044366.113:14562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044366.130:14563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044366.721:14564): pid=30222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044366.722:14565): pid=30222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044366.722:14566): pid=30222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044366.724:14567): pid=30221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30222 suid=74 rport=38382 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044366.724:14568): pid=30221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30222 suid=74 rport=38382 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044366.827:14569): pid=30221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38382 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044366.827:14570): pid=30221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38382 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044366.838:14571): pid=30221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044366.839:14572): pid=30221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30222 suid=74 rport=38382 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044366.840:14573): pid=30221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044366.840:14574): pid=30221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044366.840:14575): pid=30221 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=358 res=1 >type=USER_END msg=audit(1538044366.892:14576): pid=30073 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_limits,pam_systemd,pam_unix,pam_xauth acct="rabbitmq" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044366.892:14577): pid=30073 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_rootok acct="rabbitmq" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538044367.073:14578): pid=30221 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044367.103:14579): pid=30221 uid=0 auid=0 ses=358 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044367.146:14580): pid=30221 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044367.147:14581): pid=30221 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044367.149:14582): pid=30235 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30235 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044367.149:14583): pid=30235 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30235 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044367.149:14584): pid=30235 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30235 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044367.150:14585): pid=30235 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044367.182:14586): pid=30221 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044367.183:14587): pid=30221 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044367.184:14588): pid=30221 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044367.184:14589): pid=30221 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044367.184:14590): pid=30221 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044367.184:14591): pid=30221 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044367.184:14592): pid=30221 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30221 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044367.184:14593): pid=30221 uid=0 auid=0 ses=358 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30221 suid=0 rport=38382 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044370.232:14594): pid=30245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044370.232:14595): pid=30245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044370.232:14596): pid=30245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044370.235:14597): pid=30244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30245 suid=74 rport=38384 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044370.235:14598): pid=30244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30245 suid=74 rport=38384 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044370.332:14599): pid=30244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38384 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044370.332:14600): pid=30244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38384 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044370.342:14601): pid=30244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044370.344:14602): pid=30244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30245 suid=74 rport=38384 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044370.346:14603): pid=30244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044370.346:14604): pid=30244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044370.347:14605): pid=30244 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=359 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044370.584:14606): pid=30244 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044370.612:14607): pid=30244 uid=0 auid=0 ses=359 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044370.655:14608): pid=30244 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044370.655:14609): pid=30244 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044370.657:14610): pid=30248 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044370.658:14611): pid=30248 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044370.658:14612): pid=30248 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044370.659:14613): pid=30248 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044370.690:14614): pid=30244 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044370.691:14615): pid=30244 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044370.691:14616): pid=30244 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044370.691:14617): pid=30244 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044370.691:14618): pid=30244 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044370.691:14619): pid=30244 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044370.691:14620): pid=30244 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044370.692:14621): pid=30244 uid=0 auid=0 ses=359 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30244 suid=0 rport=38384 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044371.317:14622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044371.317:14623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044371.320:14624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044371.334:14625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044373.726:14626): pid=30268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044373.726:14627): pid=30268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044373.726:14628): pid=30268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30268 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044373.728:14629): pid=30266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30268 suid=74 rport=38386 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044373.728:14630): pid=30266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30268 suid=74 rport=38386 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044373.786:14631): pid=30266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38386 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044373.786:14632): pid=30266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38386 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044373.794:14633): pid=30266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044373.795:14634): pid=30266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30268 suid=74 rport=38386 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044373.796:14635): pid=30266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044373.797:14636): pid=30266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044373.797:14637): pid=30266 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=360 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044373.987:14638): pid=30266 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044374.005:14639): pid=30266 uid=0 auid=0 ses=360 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044374.048:14640): pid=30266 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044374.048:14641): pid=30266 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044374.049:14642): pid=30297 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044374.049:14643): pid=30297 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044374.049:14644): pid=30297 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044374.050:14645): pid=30297 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044374.076:14646): pid=30266 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044374.076:14647): pid=30266 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044374.077:14648): pid=30266 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044374.077:14649): pid=30266 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044374.077:14650): pid=30266 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30266 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044374.077:14651): pid=30266 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30266 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044374.077:14652): pid=30266 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30266 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044374.077:14653): pid=30266 uid=0 auid=0 ses=360 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30266 suid=0 rport=38386 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044375.658:14654): pid=30305 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-neutron-lbaas-1:12.0.1-0.20180424200349.cdbf25c.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044377.114:14655): pid=30354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30354 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044377.114:14656): pid=30354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30354 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044377.114:14657): pid=30354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30354 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044377.116:14658): pid=30353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30354 suid=74 rport=38394 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044377.116:14659): pid=30353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30354 suid=74 rport=38394 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044377.173:14660): pid=30353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38394 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044377.173:14661): pid=30353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38394 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044377.181:14662): pid=30353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044377.182:14663): pid=30353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30354 suid=74 rport=38394 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044377.184:14664): pid=30353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044377.184:14665): pid=30353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044377.184:14666): pid=30353 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=361 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044377.344:14667): pid=30353 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044377.362:14668): pid=30353 uid=0 auid=0 ses=361 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044377.404:14669): pid=30353 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044377.404:14670): pid=30353 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044377.407:14671): pid=30356 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044377.407:14672): pid=30356 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044377.408:14673): pid=30356 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044377.409:14674): pid=30356 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044377.433:14675): pid=30353 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044377.433:14676): pid=30353 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044377.434:14677): pid=30353 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044377.434:14678): pid=30353 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044377.434:14679): pid=30353 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044377.434:14680): pid=30353 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044377.434:14681): pid=30353 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044377.434:14682): pid=30353 uid=0 auid=0 ses=361 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30353 suid=0 rport=38394 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044380.470:14683): pid=30373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044380.471:14684): pid=30373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044380.471:14685): pid=30373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044380.473:14686): pid=30372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30373 suid=74 rport=38396 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044380.474:14687): pid=30372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30373 suid=74 rport=38396 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044380.539:14688): pid=30372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38396 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044380.539:14689): pid=30372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38396 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044380.548:14690): pid=30372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044380.549:14691): pid=30372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30373 suid=74 rport=38396 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044380.551:14692): pid=30372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044380.551:14693): pid=30372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044380.551:14694): pid=30372 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=362 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044380.776:14695): pid=30372 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538044380.784:14696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044380.784:14697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044380.787:14698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044381.005:14699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538044381.016:14700): pid=30372 uid=0 auid=0 ses=362 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044381.061:14701): pid=30372 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044381.061:14702): pid=30372 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044381.064:14703): pid=30379 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044381.064:14704): pid=30379 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044381.064:14705): pid=30379 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30379 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044381.065:14706): pid=30379 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044381.097:14707): pid=30372 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044381.097:14708): pid=30372 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044381.098:14709): pid=30372 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044381.098:14710): pid=30372 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044381.098:14711): pid=30372 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044381.099:14712): pid=30372 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044381.099:14713): pid=30372 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044381.099:14714): pid=30372 uid=0 auid=0 ses=362 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30372 suid=0 rport=38396 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044381.361:14715): pid=30383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044381.361:14716): pid=30383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044381.362:14717): pid=30383 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=363 res=1 >type=USER_START msg=audit(1538044381.398:14718): pid=30383 uid=0 auid=163 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044381.399:14719): pid=30383 uid=0 auid=163 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1538044383.560:14720): pid=30383 uid=0 auid=163 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044383.563:14721): pid=30383 uid=0 auid=163 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538044384.141:14722): pid=30409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044384.141:14723): pid=30409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044384.141:14724): pid=30409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044384.144:14725): pid=30408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30409 suid=74 rport=38400 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044384.144:14726): pid=30408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30409 suid=74 rport=38400 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044384.204:14727): pid=30408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38400 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044384.204:14728): pid=30408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38400 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044384.210:14729): pid=30408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044384.211:14730): pid=30408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30409 suid=74 rport=38400 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044384.212:14731): pid=30408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044384.212:14732): pid=30408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044384.213:14733): pid=30408 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=364 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044384.410:14734): pid=30408 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044384.443:14735): pid=30408 uid=0 auid=0 ses=364 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044384.488:14736): pid=30408 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044384.488:14737): pid=30408 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044384.491:14738): pid=30412 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044384.491:14739): pid=30412 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044384.491:14740): pid=30412 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044384.493:14741): pid=30412 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044384.530:14742): pid=30408 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044384.530:14743): pid=30408 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044384.531:14744): pid=30408 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044384.531:14745): pid=30408 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044384.532:14746): pid=30408 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30408 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044384.532:14747): pid=30408 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30408 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044384.532:14748): pid=30408 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30408 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044384.532:14749): pid=30408 uid=0 auid=0 ses=364 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30408 suid=0 rport=38400 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044385.654:14750): pid=30416 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044385.655:14751): pid=30416 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044385.655:14752): pid=30416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044385.676:14753): pid=30416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044386.068:14754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044386.068:14755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044386.069:14756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044386.084:14757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044386.215:14758): pid=30416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044386.215:14759): pid=30416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044386.346:14760): pid=30459 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044386.347:14761): pid=30459 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044386.347:14762): pid=30459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044386.367:14763): pid=30459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044386.658:14764): pid=30459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044386.658:14765): pid=30459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044386.822:14766): pid=30468 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044386.822:14767): pid=30468 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044386.823:14768): pid=30468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044386.840:14769): pid=30468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044387.370:14770): pid=30468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044387.370:14771): pid=30468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044387.518:14772): pid=30476 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044387.518:14773): pid=30476 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044387.519:14774): pid=30476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044387.536:14775): pid=30476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044387.581:14776): pid=30483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044387.582:14777): pid=30483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044387.582:14778): pid=30483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044387.584:14779): pid=30482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30483 suid=74 rport=38402 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044387.585:14780): pid=30482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30483 suid=74 rport=38402 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044387.688:14781): pid=30482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38402 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044387.688:14782): pid=30482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38402 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044387.697:14783): pid=30482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044387.698:14784): pid=30482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30483 suid=74 rport=38402 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044387.699:14785): pid=30482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044387.699:14786): pid=30482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044387.700:14787): pid=30482 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=365 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044387.859:14788): pid=30482 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044387.886:14789): pid=30482 uid=0 auid=0 ses=365 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044387.930:14790): pid=30482 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044387.930:14791): pid=30482 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044387.933:14792): pid=30490 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044387.933:14793): pid=30490 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044387.933:14794): pid=30490 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044387.934:14795): pid=30476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044387.934:14796): pid=30476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044387.935:14797): pid=30490 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044387.968:14798): pid=30482 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044387.969:14799): pid=30482 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044387.970:14800): pid=30482 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044387.970:14801): pid=30482 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044387.970:14802): pid=30482 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044387.970:14803): pid=30482 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044387.971:14804): pid=30482 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044387.971:14805): pid=30482 uid=0 auid=0 ses=365 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30482 suid=0 rport=38402 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044391.019:14806): pid=30511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044391.020:14807): pid=30511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044391.020:14808): pid=30511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30511 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044391.022:14809): pid=30510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30511 suid=74 rport=38404 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044391.023:14810): pid=30510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30511 suid=74 rport=38404 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044391.113:14811): pid=30510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38404 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044391.113:14812): pid=30510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38404 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044391.123:14813): pid=30510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044391.124:14814): pid=30510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30511 suid=74 rport=38404 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044391.127:14815): pid=30510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044391.128:14816): pid=30510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044391.128:14817): pid=30510 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=366 res=1 >type=SERVICE_START msg=audit(1538044391.320:14818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044391.320:14819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044391.323:14820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044391.346:14821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538044391.386:14822): pid=30510 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044391.415:14823): pid=30510 uid=0 auid=0 ses=366 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044391.459:14824): pid=30510 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044391.460:14825): pid=30510 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044391.463:14826): pid=30517 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044391.463:14827): pid=30517 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044391.463:14828): pid=30517 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044391.465:14829): pid=30517 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044391.497:14830): pid=30510 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044391.497:14831): pid=30510 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044391.497:14832): pid=30510 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044391.498:14833): pid=30510 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044391.498:14834): pid=30510 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044391.498:14835): pid=30510 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044391.498:14836): pid=30510 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044391.498:14837): pid=30510 uid=0 auid=0 ses=366 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30510 suid=0 rport=38404 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AVC msg=audit(1538044394.189:14838): pid=2252 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: received policyload notice (seqno=11) exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' >type=MAC_POLICY_LOAD msg=audit(1538044390.971:14839): policy loaded auid=0 ses=354 >type=SYSCALL msg=audit(1538044390.971:14839): arch=c000003e syscall=1 success=yes exit=3931066 a0=4 a1=7ff808df1000 a2=3bfbba a3=7ffd537c95a0 items=0 ppid=30364 pid=30507 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=354 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044390.971:14839): proctitle="/usr/sbin/load_policy" >type=SOFTWARE_UPDATE msg=audit(1538044394.221:14840): pid=30338 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openvswitch-selinux-extra-policy-1.0-5.el7fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538044394.261:14841): pid=30527 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538044394.264:14842): pid=30527 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538044394.282:14843): pid=30532 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=988 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538044394.309:14844): pid=30538 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=1001 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538044394.312:14845): pid=30538 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=1001 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538044394.319:14846): pid=30542 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="hugetlbfs" acct="openvswitch" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538044394.319:14847): pid=30542 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="hugetlbfs" acct="openvswitch" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044394.552:14848): pid=30551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044394.552:14849): pid=30551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044394.552:14850): pid=30551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044394.554:14851): pid=30550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30551 suid=74 rport=38406 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044394.555:14852): pid=30550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=30551 suid=74 rport=38406 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044394.657:14853): pid=30550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38406 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044394.657:14854): pid=30550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38406 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044394.670:14855): pid=30550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044394.671:14856): pid=30550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30551 suid=74 rport=38406 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044394.675:14857): pid=30550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044394.675:14858): pid=30550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044394.675:14859): pid=30550 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=367 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044394.928:14860): pid=30550 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_AVC msg=audit(1538044394.944:14861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=11) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1538044394.964:14862): pid=30550 uid=0 auid=0 ses=367 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044395.008:14863): pid=30550 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044395.008:14864): pid=30550 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044395.011:14865): pid=30554 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044395.011:14866): pid=30554 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044395.011:14867): pid=30554 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044395.013:14868): pid=30554 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044395.050:14869): pid=30550 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044395.051:14870): pid=30550 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044395.052:14871): pid=30550 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044395.052:14872): pid=30550 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044395.052:14873): pid=30550 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=30550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044395.052:14874): pid=30550 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=30550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044395.052:14875): pid=30550 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=30550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044395.053:14876): pid=30550 uid=0 auid=0 ses=367 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30550 suid=0 rport=38406 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044395.367:14877): pid=30338 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openvswitch-2.9.0-56.el7fdp.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRED_ACQ msg=audit(1538044397.198:14878): pid=31311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:openvswitch_t:s0 msg='op=PAM:setcred grantors=pam_rootok acct="openvswitch" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044397.200:14879): pid=31311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:openvswitch_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="openvswitch" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044397.206:14880): pid=31311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:openvswitch_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="openvswitch" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044397.206:14881): pid=31311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:openvswitch_t:s0 msg='op=PAM:setcred grantors=pam_rootok acct="openvswitch" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=CRED_ACQ msg=audit(1538044397.213:14882): pid=31314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:openvswitch_t:s0 msg='op=PAM:setcred grantors=pam_rootok acct="openvswitch" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044397.214:14883): pid=31314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:openvswitch_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="openvswitch" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044397.228:14884): pid=31314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:openvswitch_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="openvswitch" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044397.228:14885): pid=31314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:openvswitch_t:s0 msg='op=PAM:setcred grantors=pam_rootok acct="openvswitch" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044397.297:14886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovsdb-server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044397.324:14887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovs-delete-transient-ports comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044397.471:14888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovs-vswitchd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044397.477:14889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openvswitch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044398.099:14890): pid=31457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044398.100:14891): pid=31457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044398.100:14892): pid=31457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044398.102:14893): pid=31456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=31457 suid=74 rport=38412 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044398.102:14894): pid=31456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=31457 suid=74 rport=38412 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044398.171:14895): pid=31456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38412 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044398.172:14896): pid=31456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38412 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044398.179:14897): pid=31456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044398.180:14898): pid=31456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31457 suid=74 rport=38412 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044398.182:14899): pid=31456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044398.182:14900): pid=31456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044398.182:14901): pid=31456 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=368 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044398.360:14902): pid=31456 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044398.381:14903): pid=31456 uid=0 auid=0 ses=368 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044398.424:14904): pid=31456 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044398.424:14905): pid=31456 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044398.427:14906): pid=31463 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044398.427:14907): pid=31463 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044398.427:14908): pid=31463 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044398.429:14909): pid=31463 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044398.472:14910): pid=31456 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044398.473:14911): pid=31456 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044398.473:14912): pid=31456 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044398.473:14913): pid=31456 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044398.473:14914): pid=31456 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044398.473:14915): pid=31456 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044398.473:14916): pid=31456 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044398.474:14917): pid=31456 uid=0 auid=0 ses=368 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31456 suid=0 rport=38412 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044401.319:14918): pid=31450 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-neutron-openvswitch-1:12.0.3-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044401.509:14919): pid=31512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044401.509:14920): pid=31512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044401.510:14921): pid=31512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044401.512:14922): pid=31507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=31512 suid=74 rport=38416 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044401.512:14923): pid=31507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=31512 suid=74 rport=38416 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044401.615:14924): pid=31507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38416 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044401.615:14925): pid=31507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38416 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044401.624:14926): pid=31507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044401.626:14927): pid=31507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31512 suid=74 rport=38416 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044401.628:14928): pid=31507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044401.629:14929): pid=31507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044401.630:14930): pid=31507 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=369 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044401.861:14931): pid=31507 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044401.881:14932): pid=31507 uid=0 auid=0 ses=369 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044401.924:14933): pid=31507 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044401.924:14934): pid=31507 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044401.928:14935): pid=31547 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044401.928:14936): pid=31547 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044401.928:14937): pid=31547 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044401.929:14938): pid=31547 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044401.963:14939): pid=31507 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044401.963:14940): pid=31507 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044401.964:14941): pid=31507 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044401.964:14942): pid=31507 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044401.965:14943): pid=31507 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044401.965:14944): pid=31507 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044401.965:14945): pid=31507 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044401.965:14946): pid=31507 uid=0 auid=0 ses=369 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31507 suid=0 rport=38416 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044404.240:14947): pid=31540 uid=0 auid=0 ses=354 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-neutron-metering-agent-1:12.0.3-5.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044405.018:14948): pid=31578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044405.018:14949): pid=31578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044405.018:14950): pid=31578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044405.021:14951): pid=31577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=31578 suid=74 rport=38420 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044405.021:14952): pid=31577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=31578 suid=74 rport=38420 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044405.115:14953): pid=31577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38420 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044405.115:14954): pid=31577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38420 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044405.124:14955): pid=31577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044405.125:14956): pid=31577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31578 suid=74 rport=38420 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044405.127:14957): pid=31577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044405.127:14958): pid=31577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044405.127:14959): pid=31577 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=370 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044405.302:14960): pid=31577 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044405.424:14961): pid=31577 uid=0 auid=0 ses=370 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044405.469:14962): pid=31577 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044405.469:14963): pid=31577 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044405.471:14964): pid=31619 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31619 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044405.471:14965): pid=31619 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31619 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044405.471:14966): pid=31619 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31619 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044405.472:14967): pid=31619 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044405.500:14968): pid=31577 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044405.500:14969): pid=31577 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044405.501:14970): pid=31577 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044405.501:14971): pid=31577 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044405.501:14972): pid=31577 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044405.501:14973): pid=31577 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044405.501:14974): pid=31577 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044405.501:14975): pid=31577 uid=0 auid=0 ses=370 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31577 suid=0 rport=38420 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044407.974:14976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=neutron-lbaasv2-agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044408.557:14977): pid=31722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044408.557:14978): pid=31722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044408.558:14979): pid=31722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044408.562:14980): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=31722 suid=74 rport=38422 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044408.562:14981): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=31722 suid=74 rport=38422 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044408.620:14982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=neutron-l3-agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538044408.649:14983): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38422 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044408.649:14984): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38422 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044408.660:14985): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044408.661:14986): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31722 suid=74 rport=38422 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044408.663:14987): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044408.664:14988): pid=31721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044408.664:14989): pid=31721 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=371 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044409.015:14990): pid=31721 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044409.047:14991): pid=31721 uid=0 auid=0 ses=371 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044409.090:14992): pid=31721 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044409.090:14993): pid=31721 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044409.092:14994): pid=31755 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044409.092:14995): pid=31755 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044409.092:14996): pid=31755 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044409.094:14997): pid=31755 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044409.243:14998): pid=31721 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044409.243:14999): pid=31721 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044409.244:15000): pid=31721 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044409.244:15001): pid=31721 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044409.245:15002): pid=31721 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044409.245:15003): pid=31721 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044409.245:15004): pid=31721 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044409.246:15005): pid=31721 uid=0 auid=0 ses=371 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31721 suid=0 rport=38422 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044412.175:15006): pid=31836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044412.175:15007): pid=31836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044412.175:15008): pid=31836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044412.178:15009): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=31836 suid=74 rport=38824 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044412.178:15010): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=31836 suid=74 rport=38824 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044412.235:15011): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=38824 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044412.235:15012): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=38824 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044412.243:15013): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044412.245:15014): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31836 suid=74 rport=38824 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044412.247:15015): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044412.247:15016): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044412.247:15017): pid=31835 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=372 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044412.429:15018): pid=31835 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044412.454:15019): pid=31835 uid=0 auid=0 ses=372 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044412.498:15020): pid=31835 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044412.498:15021): pid=31835 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044412.501:15022): pid=31838 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044412.501:15023): pid=31838 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044412.501:15024): pid=31838 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044412.503:15025): pid=31838 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044412.539:15026): pid=31835 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044412.539:15027): pid=31835 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044412.540:15028): pid=31835 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044412.540:15029): pid=31835 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044412.541:15030): pid=31835 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=31835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044412.541:15031): pid=31835 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=31835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044412.541:15032): pid=31835 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=31835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044412.541:15033): pid=31835 uid=0 auid=0 ses=372 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31835 suid=0 rport=38824 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044412.922:15034): pid=31843 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044412.923:15035): pid=31843 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F74777261702D6461656D6F6E202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66 terminal=? res=success' >type=CRED_REFR msg=audit(1538044412.923:15036): pid=31843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044412.952:15037): pid=31843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044413.563:15038): pid=31843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044413.563:15039): pid=31843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044413.667:15040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=neutron-destroy-patch-ports comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044414.065:15041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=neutron-dhcp-agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044414.799:15042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=neutron-metadata-agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044415.506:15043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=neutron-metering-agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044415.600:15044): pid=32096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=32096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044415.601:15045): pid=32096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=32096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044415.601:15046): pid=32096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044415.604:15047): pid=32095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=32096 suid=74 rport=39484 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044415.604:15048): pid=32095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=32096 suid=74 rport=39484 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044415.677:15049): pid=32095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39484 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044415.677:15050): pid=32095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39484 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044415.685:15051): pid=32095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044415.687:15052): pid=32095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32096 suid=74 rport=39484 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044415.690:15053): pid=32095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044415.690:15054): pid=32095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044415.690:15055): pid=32095 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=373 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044415.942:15056): pid=32095 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044416.251:15057): pid=32095 uid=0 auid=0 ses=373 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044416.297:15058): pid=32095 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044416.298:15059): pid=32095 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044416.299:15060): pid=32147 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=32147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044416.299:15061): pid=32147 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=32147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044416.299:15062): pid=32147 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044416.301:15063): pid=32147 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044416.334:15064): pid=32095 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044416.334:15065): pid=32095 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044416.335:15066): pid=32095 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044416.335:15067): pid=32095 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044416.335:15068): pid=32095 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=32095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044416.335:15069): pid=32095 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=32095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044416.336:15070): pid=32095 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32095 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044416.336:15071): pid=32095 uid=0 auid=0 ses=373 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32095 suid=0 rport=39484 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044417.330:15072): table=filter family=2 entries=28 >type=SYSCALL msg=audit(1538044417.330:15072): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8232e0 items=0 ppid=29741 pid=32172 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=354 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044417.330:15072): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E505554003134002D2D77616974002D740066696C746572002D73003137322E31362E312E31332F3332002D7000756470002D6D006D756C7469706F7274002D2D64706F7274730034373839002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D65 >type=ANOM_PROMISCUOUS msg=audit(1538044417.490:15073): dev=ovs-system prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044417.490:15073): arch=c000003e syscall=46 success=yes exit=56 a0=12 a1=7fffcd80c060 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044417.490:15073): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538044417.578:15074): dev=br-myphysnet prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044417.578:15074): arch=c000003e syscall=46 success=yes exit=76 a0=12 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044417.578:15074): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538044417.671:15075): dev=eth2 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044417.671:15075): arch=c000003e syscall=46 success=yes exit=68 a0=12 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044417.671:15075): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538044417.902:15076): dev=br-myphysnet prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044417.902:15076): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1d0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044417.902:15076): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538044417.911:15077): dev=eth2 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044417.911:15077): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1d0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044417.911:15077): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538044417.939:15078): dev=ovs-system prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044417.939:15078): arch=c000003e syscall=46 success=yes exit=24 a0=19 a1=7fffcd80c1f0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044417.939:15078): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_ACCT msg=audit(1538044418.242:15079): pid=32417 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044418.243:15080): pid=32417 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66202D2D636F6E6669672D646972202F6574632F6E657574726F6E2F636F6E662E642F6E657574726F6E2D6C332D6167656E74202D2D707269767365705F636F6E74657874206E657574726F6E2E70726976696C656765642E64656661756C74202D2D707269767365705F736F636B5F70617468202F746D702F746D70304B386B37322F707269767365702E736F636B terminal=? res=success' >type=CRED_REFR msg=audit(1538044418.243:15081): pid=32417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1538044418.260:15082): avc: denied { read } for pid=32417 comm="sudo" name="utmp" dev="tmpfs" ino=9809 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1 >type=AVC msg=audit(1538044418.260:15082): avc: denied { open } for pid=32417 comm="sudo" path="/run/utmp" dev="tmpfs" ino=9809 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1 >type=SYSCALL msg=audit(1538044418.260:15082): arch=c000003e syscall=2 success=yes exit=6 a0=7f3c9756c9c8 a1=80000 a2=7f3c9756c9b9 a3=7ffc6216f560 items=0 ppid=31728 pid=32417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044418.260:15082): proctitle=7375646F006E657574726F6E2D726F6F7477726170002F6574632F6E657574726F6E2F726F6F74777261702E636F6E6600707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65 >type=AVC msg=audit(1538044418.261:15083): avc: denied { lock } for pid=32417 comm="sudo" path="/run/utmp" dev="tmpfs" ino=9809 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1 >type=SYSCALL msg=audit(1538044418.261:15083): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=7ffc6216f910 a3=8 items=0 ppid=31728 pid=32417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044418.261:15083): proctitle=7375646F006E657574726F6E2D726F6F7477726170002F6574632F6E657574726F6E2F726F6F74777261702E636F6E6600707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65 >type=USER_START msg=audit(1538044418.261:15084): pid=32417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044418.393:15085): dev=ovs-system prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044418.393:15085): arch=c000003e syscall=46 success=yes exit=56 a0=19 a1=7fffcd80c060 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044418.393:15085): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538044418.446:15086): dev=br-myphysnet prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044418.446:15086): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044418.446:15086): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=CRYPTO_KEY_USER msg=audit(1538044419.422:15087): pid=32535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=32535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044419.422:15088): pid=32535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=32535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044419.423:15089): pid=32535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044419.425:15090): pid=32534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=32535 suid=74 rport=39520 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044419.426:15091): pid=32534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=32535 suid=74 rport=39520 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_END msg=audit(1538044419.448:15092): pid=32417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044419.448:15093): pid=32417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538044419.484:15094): pid=32534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39520 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044419.484:15095): pid=32534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39520 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044419.491:15096): pid=32534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044419.492:15097): pid=32534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32535 suid=74 rport=39520 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044419.494:15098): pid=32534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044419.494:15099): pid=32534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044419.494:15100): pid=32534 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=374 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044419.675:15101): pid=32534 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044419.699:15102): pid=32534 uid=0 auid=0 ses=374 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044419.742:15103): pid=32534 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044419.742:15104): pid=32534 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044419.745:15105): pid=32539 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=32539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044419.745:15106): pid=32539 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=32539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044419.746:15107): pid=32539 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044419.747:15108): pid=32539 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044419.777:15109): pid=32534 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044419.777:15110): pid=32534 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044419.778:15111): pid=32534 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044419.779:15112): pid=32534 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044419.779:15113): pid=32534 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=32534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044419.779:15114): pid=32534 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=32534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044419.779:15115): pid=32534 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044419.779:15116): pid=32534 uid=0 auid=0 ses=374 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32534 suid=0 rport=39520 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044421.318:15117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044421.318:15118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044421.320:15119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044421.499:15120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044422.859:15121): pid=32624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=32624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044422.859:15122): pid=32624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=32624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044422.859:15123): pid=32624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32624 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044422.862:15124): pid=32620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=32624 suid=74 rport=39522 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044422.862:15125): pid=32620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=32624 suid=74 rport=39522 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044422.927:15126): pid=32620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39522 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044422.927:15127): pid=32620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39522 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044422.935:15128): pid=32620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044422.935:15129): pid=32620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32624 suid=74 rport=39522 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044422.938:15130): pid=32620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044422.939:15131): pid=32620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044422.939:15132): pid=32620 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=375 res=1 >type=ANOM_PROMISCUOUS msg=audit(1538044422.947:15133): dev=eth2 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044422.947:15133): arch=c000003e syscall=46 success=yes exit=68 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044422.947:15133): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_ROLE_CHANGE msg=audit(1538044423.122:15134): pid=32620 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044423.156:15135): pid=32620 uid=0 auid=0 ses=375 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044423.199:15136): pid=32620 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044423.199:15137): pid=32620 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044423.200:15138): pid=32690 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=32690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044423.200:15139): pid=32690 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=32690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044423.200:15140): pid=32690 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044423.201:15141): pid=32690 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044423.238:15142): pid=32620 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044423.238:15143): pid=32620 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044423.238:15144): pid=32620 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044423.238:15145): pid=32620 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044423.238:15146): pid=32620 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=32620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044423.238:15147): pid=32620 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=32620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044423.239:15148): pid=32620 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044423.239:15149): pid=32620 uid=0 auid=0 ses=375 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32620 suid=0 rport=39522 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044423.762:15150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=neutron-openvswitch-agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044424.374:15151): table=filter family=2 entries=29 >type=SYSCALL msg=audit(1538044424.374:15151): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=fb0730 items=0 ppid=29741 pid=322 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=354 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044424.374:15151): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E505554003133002D2D77616974002D740066696C746572002D7000756470002D6D006D756C7469706F7274002D2D64706F727473003637002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E7400303031206E657574726F6E206468637020 >type=NETFILTER_CFG msg=audit(1538044424.868:15152): table=filter family=2 entries=30 >type=SYSCALL msg=audit(1538044424.868:15152): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1293b90 items=0 ppid=29741 pid=357 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=354 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044424.868:15152): proctitle=2F7573722F7362696E2F69707461626C6573002D49004F55545055540031002D2D77616974002D740066696C746572002D7000756470002D6D006D756C7469706F7274002D2D64706F727473003638002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E7400303031206E657574726F6E206468637020 >type=CRYPTO_KEY_USER msg=audit(1538044426.304:15153): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044426.304:15154): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044426.304:15155): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044426.307:15156): pid=389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=390 suid=74 rport=39524 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044426.307:15157): pid=389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=390 suid=74 rport=39524 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044426.410:15158): pid=389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39524 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044426.410:15159): pid=389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39524 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044426.418:15160): pid=389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044426.419:15161): pid=389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=390 suid=74 rport=39524 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044426.422:15162): pid=389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044426.422:15163): pid=389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044426.422:15164): pid=389 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=376 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044426.675:15165): pid=389 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044426.711:15166): pid=389 uid=0 auid=0 ses=376 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044426.755:15167): pid=389 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044426.755:15168): pid=389 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044426.757:15169): pid=393 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044426.757:15170): pid=393 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044426.757:15171): pid=393 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044426.758:15172): pid=393 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044426.788:15173): pid=389 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044426.789:15174): pid=389 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044426.790:15175): pid=389 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044426.790:15176): pid=389 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044426.790:15177): pid=389 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044426.790:15178): pid=389 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044426.790:15179): pid=389 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=389 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044426.791:15180): pid=389 uid=0 auid=0 ses=376 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=389 suid=0 rport=39524 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044427.332:15181): dev=br-int prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044427.332:15181): arch=c000003e syscall=46 success=yes exit=68 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044427.332:15181): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538044427.640:15182): dev=br-tun prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044427.640:15182): arch=c000003e syscall=46 success=yes exit=68 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044427.640:15182): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_ACCT msg=audit(1538044427.753:15183): pid=468 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044427.754:15184): pid=468 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F74777261702D6461656D6F6E202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66 terminal=? res=success' >type=CRED_REFR msg=audit(1538044427.754:15185): pid=468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1538044427.779:15186): avc: denied { read } for pid=468 comm="sudo" name="utmp" dev="tmpfs" ino=9809 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1 >type=AVC msg=audit(1538044427.779:15186): avc: denied { open } for pid=468 comm="sudo" path="/run/utmp" dev="tmpfs" ino=9809 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1 >type=SYSCALL msg=audit(1538044427.779:15186): arch=c000003e syscall=2 success=yes exit=4 a0=7f78f1ea89c8 a1=80000 a2=7f78f1ea89b9 a3=7ffc13a6a320 items=0 ppid=32730 pid=468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044427.779:15186): proctitle=7375646F006E657574726F6E2D726F6F74777261702D6461656D6F6E002F6574632F6E657574726F6E2F726F6F74777261702E636F6E66 >type=AVC msg=audit(1538044427.779:15187): avc: denied { lock } for pid=468 comm="sudo" path="/run/utmp" dev="tmpfs" ino=9809 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1 >type=SYSCALL msg=audit(1538044427.779:15187): arch=c000003e syscall=72 success=yes exit=0 a0=4 a1=7 a2=7ffc13a6a700 a3=8 items=0 ppid=32730 pid=468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044427.779:15187): proctitle=7375646F006E657574726F6E2D726F6F74777261702D6461656D6F6E002F6574632F6E657574726F6E2F726F6F74777261702E636F6E66 >type=USER_START msg=audit(1538044427.779:15188): pid=468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044428.015:15189): table=raw family=2 entries=0 >type=SYSCALL msg=audit(1538044428.015:15189): arch=c000003e syscall=175 success=yes exit=0 a0=1ec81b0 a1=1a81 a2=41a94e a3=1ec4300 items=0 ppid=482 pid=483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044428.015:15189): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F726177 >type=SERVICE_START msg=audit(1538044429.068:15190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044429.068:15191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044429.071:15192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044429.246:15193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044429.842:15194): pid=499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044429.842:15195): pid=499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044429.842:15196): pid=499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044429.845:15197): pid=497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=499 suid=74 rport=39564 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044429.845:15198): pid=497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=499 suid=74 rport=39564 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044429.904:15199): pid=497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39564 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044429.904:15200): pid=497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39564 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044429.914:15201): pid=497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044429.914:15202): pid=497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=499 suid=74 rport=39564 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044429.916:15203): pid=497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044429.917:15204): pid=497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044429.917:15205): pid=497 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=377 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044430.151:15206): pid=497 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044430.180:15207): pid=497 uid=0 auid=0 ses=377 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044430.225:15208): pid=497 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044430.225:15209): pid=497 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044430.227:15210): pid=501 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044430.227:15211): pid=501 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044430.227:15212): pid=501 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044430.229:15213): pid=501 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044430.267:15214): pid=497 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044430.268:15215): pid=497 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044430.268:15216): pid=497 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044430.269:15217): pid=497 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044430.269:15218): pid=497 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044430.269:15219): pid=497 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044430.269:15220): pid=497 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044430.270:15221): pid=497 uid=0 auid=0 ses=377 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=497 suid=0 rport=39564 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044431.703:15222): pid=508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044431.704:15223): pid=508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044431.704:15224): pid=508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044431.707:15225): pid=507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=508 suid=74 rport=39566 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044431.707:15226): pid=507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=508 suid=74 rport=39566 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044431.778:15227): pid=507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39566 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044431.778:15228): pid=507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39566 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044431.787:15229): pid=507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044431.787:15230): pid=507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=508 suid=74 rport=39566 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044431.789:15231): pid=507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044431.789:15232): pid=507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044431.789:15233): pid=507 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=378 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044431.950:15234): pid=507 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044431.971:15235): pid=507 uid=0 auid=0 ses=378 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044432.016:15236): pid=507 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044432.016:15237): pid=507 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.020:15238): pid=510 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.020:15239): pid=510 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.020:15240): pid=510 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044432.022:15241): pid=510 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044432.051:15242): pid=507 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044432.051:15243): pid=507 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044432.052:15244): pid=507 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044432.052:15245): pid=507 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.052:15246): pid=507 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.052:15247): pid=507 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.052:15248): pid=507 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=507 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.052:15249): pid=507 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=507 suid=0 rport=39566 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.086:15250): pid=523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.086:15251): pid=523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.086:15252): pid=523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044432.089:15253): pid=522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=523 suid=74 rport=39568 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044432.089:15254): pid=522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=523 suid=74 rport=39568 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044432.188:15255): pid=522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39568 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044432.188:15256): pid=522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39568 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044432.198:15257): pid=522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.199:15258): pid=522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=523 suid=74 rport=39568 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044432.201:15259): pid=522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044432.201:15260): pid=522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044432.202:15261): pid=522 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=379 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044432.419:15262): pid=522 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044432.438:15263): pid=522 uid=0 auid=0 ses=379 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044432.482:15264): pid=522 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044432.482:15265): pid=522 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.485:15266): pid=526 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.485:15267): pid=526 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.485:15268): pid=526 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044432.486:15269): pid=526 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044432.513:15270): pid=522 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044432.513:15271): pid=522 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044432.514:15272): pid=522 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044432.514:15273): pid=522 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.514:15274): pid=522 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=522 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.514:15275): pid=522 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=522 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.514:15276): pid=522 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=522 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044432.514:15277): pid=522 uid=0 auid=0 ses=379 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=522 suid=0 rport=39568 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044434.318:15278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044434.318:15279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044434.320:15280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044434.344:15281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044435.550:15282): pid=585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=585 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044435.550:15283): pid=585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=585 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044435.551:15284): pid=585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=585 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044435.553:15285): pid=584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=585 suid=74 rport=39612 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044435.553:15286): pid=584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=585 suid=74 rport=39612 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044435.624:15287): pid=584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39612 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044435.624:15288): pid=584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39612 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044435.634:15289): pid=584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044435.635:15290): pid=584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=585 suid=74 rport=39612 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044435.637:15291): pid=584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044435.638:15292): pid=584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044435.638:15293): pid=584 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=380 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044435.879:15294): pid=584 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044435.907:15295): pid=584 uid=0 auid=0 ses=380 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044435.949:15296): pid=584 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044435.950:15297): pid=584 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044435.951:15298): pid=602 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044435.951:15299): pid=602 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044435.951:15300): pid=602 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044435.953:15301): pid=602 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044435.981:15302): pid=584 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044435.981:15303): pid=584 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044435.981:15304): pid=584 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044435.982:15305): pid=584 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044435.982:15306): pid=584 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044435.982:15307): pid=584 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044435.982:15308): pid=584 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044435.982:15309): pid=584 uid=0 auid=0 ses=380 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=584 suid=0 rport=39612 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044438.404:15310): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044438.404:15310): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044438.404:15310): table=raw family=2 entries=0 >type=SYSCALL msg=audit(1538044438.404:15310): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffde484cf60 items=0 ppid=804 pid=811 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=378 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044438.404:15310): proctitle=6970006E65746E730061646400746573746E732D31303635313033303135 >type=NETFILTER_CFG msg=audit(1538044438.504:15311): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044438.504:15311): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044438.504:15311): table=raw family=2 entries=0 >type=SYSCALL msg=audit(1538044438.504:15311): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffd61c456e0 items=0 ppid=804 pid=818 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=378 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044438.504:15311): proctitle=6970006E65746E730061646400746573746E732D31393636323937333237 >type=NETFILTER_CFG msg=audit(1538044438.608:15312): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044438.608:15312): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044438.608:15312): table=raw family=2 entries=0 >type=SYSCALL msg=audit(1538044438.608:15312): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7ffc922509e0 items=0 ppid=804 pid=822 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=378 comm="ip" exe="/usr/sbin/ip" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044438.608:15312): proctitle=6970006E65746E730061646400746573746E732D31383833353637323837 >type=CRYPTO_KEY_USER msg=audit(1538044439.026:15313): pid=847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044439.026:15314): pid=847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044439.026:15315): pid=847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044439.029:15316): pid=846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=847 suid=74 rport=39624 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044439.029:15317): pid=846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=847 suid=74 rport=39624 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044439.090:15318): pid=846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39624 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044439.090:15319): pid=846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39624 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044439.100:15320): pid=846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044439.100:15321): pid=846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=847 suid=74 rport=39624 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044439.102:15322): pid=846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044439.102:15323): pid=846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044439.102:15324): pid=846 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=381 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044439.281:15325): pid=846 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044439.309:15326): pid=846 uid=0 auid=0 ses=381 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044439.353:15327): pid=846 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044439.353:15328): pid=846 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044439.356:15329): pid=849 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044439.356:15330): pid=849 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044439.357:15331): pid=849 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044439.358:15332): pid=849 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044439.392:15333): pid=846 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044439.392:15334): pid=846 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044439.393:15335): pid=846 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044439.393:15336): pid=846 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044439.393:15337): pid=846 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044439.394:15338): pid=846 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044439.394:15339): pid=846 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044439.394:15340): pid=846 uid=0 auid=0 ses=381 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=846 suid=0 rport=39624 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044439.402:15341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044439.402:15342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044439.403:15343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044439.417:15344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_AUTH msg=audit(1538044441.158:15345): pid=905 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=pam_rootok acct="rabbitmq" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044441.158:15346): pid=905 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_succeed_if acct="rabbitmq" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' >type=CRED_ACQ msg=audit(1538044441.159:15347): pid=905 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_rootok acct="rabbitmq" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044441.165:15348): pid=905 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_limits,pam_systemd,pam_unix,pam_xauth acct="rabbitmq" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044441.584:15349): pid=1016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044441.585:15350): pid=1016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044441.586:15351): pid=1016 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=382 res=1 >type=USER_START msg=audit(1538044441.620:15352): pid=1016 uid=0 auid=163 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044441.621:15353): pid=1016 uid=0 auid=163 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538044442.427:15354): pid=1064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044442.427:15355): pid=1064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044442.427:15356): pid=1064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044442.430:15357): pid=1063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1064 suid=74 rport=39626 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044442.430:15358): pid=1063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1064 suid=74 rport=39626 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044442.489:15359): pid=1063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39626 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044442.489:15360): pid=1063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39626 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044442.494:15361): pid=1063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044442.495:15362): pid=1063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1064 suid=74 rport=39626 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044442.496:15363): pid=1063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044442.497:15364): pid=1063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044442.497:15365): pid=1063 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=383 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044442.673:15366): pid=1063 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044442.692:15367): pid=1063 uid=0 auid=0 ses=383 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044442.736:15368): pid=1063 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044442.736:15369): pid=1063 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044442.737:15370): pid=1069 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044442.738:15371): pid=1069 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044442.738:15372): pid=1069 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044442.739:15373): pid=1069 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044442.761:15374): pid=1063 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044442.761:15375): pid=1063 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044442.762:15376): pid=1063 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044442.762:15377): pid=1063 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044442.762:15378): pid=1063 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044442.762:15379): pid=1063 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044442.762:15380): pid=1063 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044442.762:15381): pid=1063 uid=0 auid=0 ses=383 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1063 suid=0 rport=39626 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_END msg=audit(1538044442.907:15382): pid=905 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_limits,pam_systemd,pam_unix,pam_xauth acct="rabbitmq" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044442.907:15383): pid=905 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_rootok acct="rabbitmq" exe="/usr/bin/su" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044443.003:15384): pid=1016 uid=0 auid=163 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044443.008:15385): pid=1016 uid=0 auid=163 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538044444.567:15386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044444.567:15387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044444.570:15388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044444.584:15389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044445.660:15390): pid=1096 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044445.661:15391): pid=1096 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044445.661:15392): pid=1096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AVC msg=audit(1538044445.682:15393): pid=2252 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_return dest=:1.1103 spid=2405 tpid=1096 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:cinder_volume_t:s0 tclass=dbus exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' >type=USER_START msg=audit(1538044445.683:15394): pid=1096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044445.814:15395): pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044445.814:15396): pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044445.814:15397): pid=1103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1103 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044445.817:15398): pid=1102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1103 suid=74 rport=39630 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044445.817:15399): pid=1102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1103 suid=74 rport=39630 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044445.915:15400): pid=1102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39630 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044445.915:15401): pid=1102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39630 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044445.922:15402): pid=1102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044445.923:15403): pid=1102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1103 suid=74 rport=39630 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044445.924:15404): pid=1102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044445.925:15405): pid=1102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044445.925:15406): pid=1102 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=384 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044446.102:15407): pid=1102 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044446.129:15408): pid=1102 uid=0 auid=0 ses=384 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044446.154:15409): pid=1096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044446.155:15410): pid=1096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538044446.174:15411): pid=1102 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044446.174:15412): pid=1102 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044446.177:15413): pid=1112 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044446.177:15414): pid=1112 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044446.177:15415): pid=1112 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044446.178:15416): pid=1112 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044446.208:15417): pid=1102 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044446.209:15418): pid=1102 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044446.210:15419): pid=1102 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044446.210:15420): pid=1102 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044446.210:15421): pid=1102 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1102 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044446.210:15422): pid=1102 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1102 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044446.210:15423): pid=1102 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1102 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044446.210:15424): pid=1102 uid=0 auid=0 ses=384 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1102 suid=0 rport=39630 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044446.301:15425): pid=1111 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044446.302:15426): pid=1111 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044446.302:15427): pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044446.322:15428): pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044446.847:15429): pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044446.847:15430): pid=1111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044447.003:15431): pid=1123 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044447.003:15432): pid=1123 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044447.003:15433): pid=1123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044447.021:15434): pid=1123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044447.221:15435): pid=1123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044447.221:15436): pid=1123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044447.322:15437): pid=1132 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044447.322:15438): pid=1132 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044447.322:15439): pid=1132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044447.337:15440): pid=1132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044447.539:15441): pid=1132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044447.540:15442): pid=1132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044449.260:15443): pid=1179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044449.260:15444): pid=1179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044449.260:15445): pid=1179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044449.263:15446): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1179 suid=74 rport=39632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044449.263:15447): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1179 suid=74 rport=39632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044449.362:15448): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044449.362:15449): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39632 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044449.372:15450): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044449.373:15451): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1179 suid=74 rport=39632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044449.375:15452): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044449.376:15453): pid=1178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044449.377:15454): pid=1178 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=385 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044449.628:15455): pid=1178 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538044449.637:15456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044449.637:15457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044449.640:15458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044449.673:15459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538044449.679:15460): pid=1178 uid=0 auid=0 ses=385 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044449.724:15461): pid=1178 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044449.724:15462): pid=1178 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044449.726:15463): pid=1185 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044449.726:15464): pid=1185 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044449.727:15465): pid=1185 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044449.728:15466): pid=1185 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044449.759:15467): pid=1178 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044449.759:15468): pid=1178 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044449.760:15469): pid=1178 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044449.760:15470): pid=1178 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044449.761:15471): pid=1178 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044449.761:15472): pid=1178 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044449.761:15473): pid=1178 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1178 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044449.761:15474): pid=1178 uid=0 auid=0 ses=385 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1178 suid=0 rport=39632 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044452.814:15475): pid=1233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044452.815:15476): pid=1233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044452.815:15477): pid=1233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1233 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044452.817:15478): pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1233 suid=74 rport=39634 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044452.818:15479): pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1233 suid=74 rport=39634 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044452.889:15480): pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39634 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044452.889:15481): pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39634 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044452.898:15482): pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044452.899:15483): pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1233 suid=74 rport=39634 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044452.900:15484): pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044452.900:15485): pid=1229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044452.901:15486): pid=1229 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=386 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044453.072:15487): pid=1229 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044453.092:15488): pid=1229 uid=0 auid=0 ses=386 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044453.137:15489): pid=1229 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044453.137:15490): pid=1229 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044453.139:15491): pid=1236 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1236 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044453.140:15492): pid=1236 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1236 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044453.140:15493): pid=1236 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1236 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044453.141:15494): pid=1236 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044453.178:15495): pid=1229 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044453.178:15496): pid=1229 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044453.178:15497): pid=1229 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044453.179:15498): pid=1229 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044453.179:15499): pid=1229 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044453.179:15500): pid=1229 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044453.179:15501): pid=1229 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044453.179:15502): pid=1229 uid=0 auid=0 ses=386 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1229 suid=0 rport=39634 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044454.817:15503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044454.817:15504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044454.819:15505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044454.841:15506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538044455.036:15507): pid=1230 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="OpenIPMI-modalias-2.0.23-2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044455.326:15508): pid=1230 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="ipmitool-1.8.18-7.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044455.365:15509): pid=1230 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-ceilometer-ipmi-1:10.0.1-1.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044456.222:15510): pid=1315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044456.222:15511): pid=1315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044456.222:15512): pid=1315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044456.224:15513): pid=1311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1315 suid=74 rport=39642 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044456.224:15514): pid=1311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1315 suid=74 rport=39642 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044456.303:15515): pid=1311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39642 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044456.303:15516): pid=1311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39642 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044456.312:15517): pid=1311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044456.313:15518): pid=1311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1315 suid=74 rport=39642 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044456.314:15519): pid=1311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044456.314:15520): pid=1311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044456.315:15521): pid=1311 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=387 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044456.490:15522): pid=1311 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044456.521:15523): pid=1311 uid=0 auid=0 ses=387 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044456.565:15524): pid=1311 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044456.565:15525): pid=1311 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044456.568:15526): pid=1321 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044456.568:15527): pid=1321 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044456.568:15528): pid=1321 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044456.569:15529): pid=1321 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044456.594:15530): pid=1311 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044456.594:15531): pid=1311 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044456.595:15532): pid=1311 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044456.595:15533): pid=1311 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044456.595:15534): pid=1311 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044456.595:15535): pid=1311 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044456.595:15536): pid=1311 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1311 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044456.595:15537): pid=1311 uid=0 auid=0 ses=387 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1311 suid=0 rport=39642 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044459.642:15538): pid=1339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044459.642:15539): pid=1339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044459.642:15540): pid=1339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044459.644:15541): pid=1338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1339 suid=74 rport=39648 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044459.645:15542): pid=1338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1339 suid=74 rport=39648 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044459.735:15543): pid=1338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39648 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044459.735:15544): pid=1338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39648 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044459.743:15545): pid=1338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044459.744:15546): pid=1338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1339 suid=74 rport=39648 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044459.746:15547): pid=1338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044459.746:15548): pid=1338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044459.747:15549): pid=1338 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=388 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044459.951:15550): pid=1338 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044459.974:15551): pid=1338 uid=0 auid=0 ses=388 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044460.017:15552): pid=1338 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044460.017:15553): pid=1338 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044460.019:15554): pid=1342 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044460.019:15555): pid=1342 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044460.020:15556): pid=1342 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1342 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044460.021:15557): pid=1342 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044460.050:15558): pid=1338 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044460.050:15559): pid=1338 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044460.051:15560): pid=1338 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044460.051:15561): pid=1338 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044460.051:15562): pid=1338 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044460.051:15563): pid=1338 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044460.051:15564): pid=1338 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044460.051:15565): pid=1338 uid=0 auid=0 ses=388 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1338 suid=0 rport=39648 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044460.317:15566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044460.317:15567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044460.319:15568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044460.616:15569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044463.097:15570): pid=1357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1357 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044463.097:15571): pid=1357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1357 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044463.097:15572): pid=1357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1357 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044463.100:15573): pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1357 suid=74 rport=39656 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044463.100:15574): pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1357 suid=74 rport=39656 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044463.205:15575): pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044463.205:15576): pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39656 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044463.216:15577): pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044463.217:15578): pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1357 suid=74 rport=39656 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044463.220:15579): pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044463.220:15580): pid=1356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044463.220:15581): pid=1356 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=389 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044463.390:15582): pid=1356 uid=0 auid=0 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044463.414:15583): pid=1356 uid=0 auid=0 ses=389 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044463.458:15584): pid=1356 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044463.459:15585): pid=1356 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044463.460:15586): pid=1361 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044463.460:15587): pid=1361 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044463.460:15588): pid=1361 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044463.462:15589): pid=1361 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044463.490:15590): pid=1356 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044463.491:15591): pid=1356 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044463.492:15592): pid=1356 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044463.492:15593): pid=1356 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044463.492:15594): pid=1356 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044463.492:15595): pid=1356 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044463.492:15596): pid=1356 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044463.492:15597): pid=1356 uid=0 auid=0 ses=389 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1356 suid=0 rport=39656 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044465.634:15598): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="pixman-0.34.0-1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044465.648:15599): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="bridge-utils-1.5-9.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538044465.677:15600): pid=1378 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538044465.681:15601): pid=1378 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538044465.700:15602): pid=1383 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=987 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=CRED_ACQ msg=audit(1538044465.806:15603): pid=1390 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_rootok acct="unbound" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044465.807:15604): pid=1390 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_limits,pam_unix acct="unbound" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044465.818:15605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044465.818:15606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044465.820:15607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044465.838:15608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044466.546:15609): pid=1400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1400 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044466.546:15610): pid=1400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1400 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044466.546:15611): pid=1400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1400 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044466.549:15612): pid=1399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1400 suid=74 rport=39666 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044466.549:15613): pid=1399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1400 suid=74 rport=39666 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044466.641:15614): pid=1399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39666 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044466.641:15615): pid=1399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39666 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044466.649:15616): pid=1399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044466.650:15617): pid=1399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1400 suid=74 rport=39666 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044466.652:15618): pid=1399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044466.652:15619): pid=1399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044466.652:15620): pid=1399 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=390 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044466.900:15621): pid=1399 uid=0 auid=0 ses=390 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044466.927:15622): pid=1399 uid=0 auid=0 ses=390 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044466.971:15623): pid=1399 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044466.972:15624): pid=1399 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044466.974:15625): pid=1403 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1403 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044466.975:15626): pid=1403 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1403 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044466.975:15627): pid=1403 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1403 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044466.976:15628): pid=1403 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044467.010:15629): pid=1399 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044467.010:15630): pid=1399 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044467.011:15631): pid=1399 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044467.011:15632): pid=1399 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044467.011:15633): pid=1399 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044467.011:15634): pid=1399 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044467.011:15635): pid=1399 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1399 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044467.011:15636): pid=1399 uid=0 auid=0 ses=390 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1399 suid=0 rport=39666 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044470.065:15637): pid=1413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044470.065:15638): pid=1413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044470.065:15639): pid=1413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1413 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044470.068:15640): pid=1412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1413 suid=74 rport=39668 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044470.068:15641): pid=1412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1413 suid=74 rport=39668 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044470.125:15642): pid=1412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39668 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044470.125:15643): pid=1412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=39668 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044470.135:15644): pid=1412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044470.135:15645): pid=1412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1413 suid=74 rport=39668 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044470.137:15646): pid=1412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044470.138:15647): pid=1412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044470.138:15648): pid=1412 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=391 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044470.376:15649): pid=1412 uid=0 auid=0 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044470.410:15650): pid=1412 uid=0 auid=0 ses=391 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044470.455:15651): pid=1412 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044470.455:15652): pid=1412 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044470.458:15653): pid=1417 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044470.458:15654): pid=1417 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044470.458:15655): pid=1417 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1417 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044470.460:15656): pid=1417 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044470.508:15657): pid=1412 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044470.508:15658): pid=1412 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044470.509:15659): pid=1412 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044470.509:15660): pid=1412 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044470.509:15661): pid=1412 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044470.509:15662): pid=1412 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044470.510:15663): pid=1412 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044470.510:15664): pid=1412 uid=0 auid=0 ses=391 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1412 suid=0 rport=39668 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044471.068:15665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044471.068:15666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044471.069:15667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044471.089:15668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044473.551:15669): pid=1431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044473.552:15670): pid=1431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044473.552:15671): pid=1431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044473.555:15672): pid=1430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1431 suid=74 rport=40410 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044473.555:15673): pid=1430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1431 suid=74 rport=40410 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044473.621:15674): pid=1430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40410 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044473.621:15675): pid=1430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40410 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044473.630:15676): pid=1430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044473.631:15677): pid=1430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1431 suid=74 rport=40410 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044473.633:15678): pid=1430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044473.634:15679): pid=1430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044473.634:15680): pid=1430 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=392 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044473.881:15681): pid=1430 uid=0 auid=0 ses=392 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044473.910:15682): pid=1430 uid=0 auid=0 ses=392 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044473.955:15683): pid=1430 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044473.955:15684): pid=1430 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044473.958:15685): pid=1436 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044473.958:15686): pid=1436 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044473.958:15687): pid=1436 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044473.960:15688): pid=1436 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044473.997:15689): pid=1430 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044473.997:15690): pid=1430 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044473.998:15691): pid=1430 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044473.998:15692): pid=1430 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044473.998:15693): pid=1430 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1430 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044473.998:15694): pid=1430 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1430 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044473.998:15695): pid=1430 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1430 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044473.998:15696): pid=1430 uid=0 auid=0 ses=392 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1430 suid=0 rport=40410 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044476.319:15697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044476.319:15698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044476.321:15699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044476.341:15700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044477.051:15701): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044477.051:15702): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044477.051:15703): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044477.054:15704): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1449 suid=74 rport=40696 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044477.054:15705): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1449 suid=74 rport=40696 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044477.151:15706): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40696 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044477.151:15707): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40696 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044477.161:15708): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044477.162:15709): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1449 suid=74 rport=40696 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044477.163:15710): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044477.163:15711): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044477.163:15712): pid=1448 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=393 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044477.412:15713): pid=1448 uid=0 auid=0 ses=393 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044477.442:15714): pid=1448 uid=0 auid=0 ses=393 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044477.486:15715): pid=1448 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044477.486:15716): pid=1448 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044477.489:15717): pid=1452 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044477.489:15718): pid=1452 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044477.489:15719): pid=1452 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044477.491:15720): pid=1452 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044477.527:15721): pid=1448 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044477.528:15722): pid=1448 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044477.529:15723): pid=1448 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044477.529:15724): pid=1448 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044477.529:15725): pid=1448 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044477.529:15726): pid=1448 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044477.530:15727): pid=1448 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044477.530:15728): pid=1448 uid=0 auid=0 ses=393 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1448 suid=0 rport=40696 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044480.579:15729): pid=1468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044480.579:15730): pid=1468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044480.580:15731): pid=1468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044480.582:15732): pid=1467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1468 suid=74 rport=40698 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044480.583:15733): pid=1467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1468 suid=74 rport=40698 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044480.684:15734): pid=1467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40698 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044480.685:15735): pid=1467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40698 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044480.694:15736): pid=1467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044480.695:15737): pid=1467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1468 suid=74 rport=40698 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044480.697:15738): pid=1467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044480.697:15739): pid=1467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044480.697:15740): pid=1467 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=394 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044480.932:15741): pid=1467 uid=0 auid=0 ses=394 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044480.959:15742): pid=1467 uid=0 auid=0 ses=394 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044481.004:15743): pid=1467 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044481.005:15744): pid=1467 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044481.008:15745): pid=1471 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044481.008:15746): pid=1471 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044481.009:15747): pid=1471 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044481.010:15748): pid=1471 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044481.040:15749): pid=1467 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044481.040:15750): pid=1467 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044481.041:15751): pid=1467 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044481.041:15752): pid=1467 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044481.041:15753): pid=1467 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044481.041:15754): pid=1467 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044481.041:15755): pid=1467 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044481.041:15756): pid=1467 uid=0 auid=0 ses=394 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1467 suid=0 rport=40698 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044481.568:15757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044481.568:15758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044481.570:15759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044481.585:15760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044484.090:15761): pid=1486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1486 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044484.090:15762): pid=1486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1486 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044484.090:15763): pid=1486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1486 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044484.093:15764): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1486 suid=74 rport=40700 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044484.093:15765): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1486 suid=74 rport=40700 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044484.161:15766): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40700 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044484.161:15767): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40700 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044484.170:15768): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044484.171:15769): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1486 suid=74 rport=40700 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044484.172:15770): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044484.172:15771): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044484.172:15772): pid=1485 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=395 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044484.343:15773): pid=1485 uid=0 auid=0 ses=395 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044484.374:15774): pid=1485 uid=0 auid=0 ses=395 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044484.418:15775): pid=1485 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044484.418:15776): pid=1485 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044484.421:15777): pid=1489 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044484.421:15778): pid=1489 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044484.422:15779): pid=1489 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044484.424:15780): pid=1489 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044484.457:15781): pid=1485 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044484.457:15782): pid=1485 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044484.457:15783): pid=1485 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044484.457:15784): pid=1485 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044484.457:15785): pid=1485 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044484.458:15786): pid=1485 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044484.458:15787): pid=1485 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044484.458:15788): pid=1485 uid=0 auid=0 ses=395 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1485 suid=0 rport=40700 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044486.818:15789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044486.818:15790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044486.820:15791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044486.836:15792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044487.499:15793): pid=1502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044487.499:15794): pid=1502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044487.499:15795): pid=1502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044487.502:15796): pid=1501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1502 suid=74 rport=40702 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044487.503:15797): pid=1501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1502 suid=74 rport=40702 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044487.568:15798): pid=1501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40702 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044487.569:15799): pid=1501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40702 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044487.576:15800): pid=1501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044487.577:15801): pid=1501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1502 suid=74 rport=40702 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044487.579:15802): pid=1501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044487.579:15803): pid=1501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044487.579:15804): pid=1501 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=396 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044487.743:15805): pid=1501 uid=0 auid=0 ses=396 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044487.764:15806): pid=1501 uid=0 auid=0 ses=396 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044487.806:15807): pid=1501 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044487.806:15808): pid=1501 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044487.809:15809): pid=1504 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044487.809:15810): pid=1504 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044487.809:15811): pid=1504 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044487.811:15812): pid=1504 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044487.840:15813): pid=1501 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044487.841:15814): pid=1501 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044487.842:15815): pid=1501 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044487.842:15816): pid=1501 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044487.842:15817): pid=1501 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044487.842:15818): pid=1501 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044487.843:15819): pid=1501 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044487.843:15820): pid=1501 uid=0 auid=0 ses=396 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1501 suid=0 rport=40702 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044490.880:15821): pid=1515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044490.880:15822): pid=1515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044490.880:15823): pid=1515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044490.882:15824): pid=1514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1515 suid=74 rport=40704 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044490.882:15825): pid=1514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1515 suid=74 rport=40704 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044490.954:15826): pid=1514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40704 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044490.955:15827): pid=1514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40704 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044490.963:15828): pid=1514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044490.964:15829): pid=1514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1515 suid=74 rport=40704 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044490.966:15830): pid=1514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044490.966:15831): pid=1514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044490.967:15832): pid=1514 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=397 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044491.160:15833): pid=1514 uid=0 auid=0 ses=397 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044491.186:15834): pid=1514 uid=0 auid=0 ses=397 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044491.227:15835): pid=1514 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044491.228:15836): pid=1514 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044491.231:15837): pid=1517 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044491.231:15838): pid=1517 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044491.231:15839): pid=1517 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1517 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044491.233:15840): pid=1517 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044491.261:15841): pid=1514 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044491.261:15842): pid=1514 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044491.262:15843): pid=1514 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044491.262:15844): pid=1514 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044491.262:15845): pid=1514 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044491.262:15846): pid=1514 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044491.262:15847): pid=1514 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044491.262:15848): pid=1514 uid=0 auid=0 ses=397 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1514 suid=0 rport=40704 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044492.068:15849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044492.068:15850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044492.069:15851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044492.089:15852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044494.313:15853): pid=1537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044494.313:15854): pid=1537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044494.313:15855): pid=1537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044494.316:15856): pid=1536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1537 suid=74 rport=40706 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044494.317:15857): pid=1536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1537 suid=74 rport=40706 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044494.417:15858): pid=1536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40706 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044494.417:15859): pid=1536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40706 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044494.427:15860): pid=1536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044494.427:15861): pid=1536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1537 suid=74 rport=40706 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044494.429:15862): pid=1536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044494.430:15863): pid=1536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044494.430:15864): pid=1536 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=398 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044494.682:15865): pid=1536 uid=0 auid=0 ses=398 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044494.713:15866): pid=1536 uid=0 auid=0 ses=398 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044494.757:15867): pid=1536 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044494.758:15868): pid=1536 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044494.760:15869): pid=1539 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044494.760:15870): pid=1539 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044494.760:15871): pid=1539 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044494.762:15872): pid=1539 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044494.796:15873): pid=1536 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044494.797:15874): pid=1536 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044494.798:15875): pid=1536 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044494.798:15876): pid=1536 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044494.798:15877): pid=1536 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044494.798:15878): pid=1536 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044494.798:15879): pid=1536 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044494.799:15880): pid=1536 uid=0 auid=0 ses=398 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1536 suid=0 rport=40706 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044497.318:15881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044497.318:15882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044497.320:15883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044497.340:15884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044497.841:15885): pid=1554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044497.842:15886): pid=1554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044497.842:15887): pid=1554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1554 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044497.844:15888): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1554 suid=74 rport=40708 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044497.845:15889): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1554 suid=74 rport=40708 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044497.912:15890): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40708 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044497.912:15891): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40708 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044497.922:15892): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044497.923:15893): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1554 suid=74 rport=40708 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044497.924:15894): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044497.924:15895): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044497.925:15896): pid=1553 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=399 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044498.135:15897): pid=1553 uid=0 auid=0 ses=399 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044498.165:15898): pid=1553 uid=0 auid=0 ses=399 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044498.209:15899): pid=1553 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044498.209:15900): pid=1553 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044498.212:15901): pid=1556 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044498.212:15902): pid=1556 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044498.213:15903): pid=1556 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044498.214:15904): pid=1556 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044498.249:15905): pid=1553 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044498.249:15906): pid=1553 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044498.250:15907): pid=1553 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044498.250:15908): pid=1553 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044498.250:15909): pid=1553 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044498.251:15910): pid=1553 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044498.251:15911): pid=1553 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044498.251:15912): pid=1553 uid=0 auid=0 ses=399 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1553 suid=0 rport=40708 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044501.027:15913): pid=1562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044501.027:15914): pid=1562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044501.028:15915): pid=1562 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=400 res=1 >type=USER_START msg=audit(1538044501.054:15916): pid=1562 uid=0 auid=163 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044501.054:15917): pid=1562 uid=0 auid=163 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538044501.295:15918): pid=1575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1575 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044501.296:15919): pid=1575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1575 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044501.296:15920): pid=1575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1575 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044501.299:15921): pid=1574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1575 suid=74 rport=40710 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044501.299:15922): pid=1574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1575 suid=74 rport=40710 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044501.380:15923): pid=1574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40710 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044501.380:15924): pid=1574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40710 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044501.387:15925): pid=1574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044501.388:15926): pid=1574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1575 suid=74 rport=40710 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044501.390:15927): pid=1574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044501.390:15928): pid=1574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044501.391:15929): pid=1574 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=401 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044501.632:15930): pid=1574 uid=0 auid=0 ses=401 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044501.657:15931): pid=1574 uid=0 auid=0 ses=401 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044501.702:15932): pid=1574 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044501.702:15933): pid=1574 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044501.705:15934): pid=1577 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044501.705:15935): pid=1577 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044501.706:15936): pid=1577 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044501.707:15937): pid=1577 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044501.741:15938): pid=1574 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044501.742:15939): pid=1574 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044501.742:15940): pid=1574 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044501.742:15941): pid=1574 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044501.742:15942): pid=1574 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044501.742:15943): pid=1574 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044501.742:15944): pid=1574 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044501.742:15945): pid=1574 uid=0 auid=0 ses=401 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1574 suid=0 rport=40710 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044502.568:15946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044502.568:15947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044502.570:15948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044502.587:15949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRED_DISP msg=audit(1538044503.453:15950): pid=1562 uid=0 auid=163 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044503.461:15951): pid=1562 uid=0 auid=163 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538044504.787:15952): pid=1601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044504.787:15953): pid=1601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044504.788:15954): pid=1601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044504.791:15955): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1601 suid=74 rport=40714 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044504.791:15956): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1601 suid=74 rport=40714 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044504.847:15957): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40714 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044504.847:15958): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40714 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044504.856:15959): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044504.857:15960): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1601 suid=74 rport=40714 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044504.858:15961): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044504.858:15962): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044504.859:15963): pid=1600 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=402 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044505.032:15964): pid=1600 uid=0 auid=0 ses=402 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044505.064:15965): pid=1600 uid=0 auid=0 ses=402 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044505.108:15966): pid=1600 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044505.108:15967): pid=1600 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044505.111:15968): pid=1603 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044505.111:15969): pid=1603 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044505.112:15970): pid=1603 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044505.114:15971): pid=1603 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044505.148:15972): pid=1600 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044505.149:15973): pid=1600 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044505.150:15974): pid=1600 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044505.150:15975): pid=1600 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044505.150:15976): pid=1600 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044505.150:15977): pid=1600 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044505.150:15978): pid=1600 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044505.150:15979): pid=1600 uid=0 auid=0 ses=402 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1600 suid=0 rport=40714 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044505.661:15980): pid=1608 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044505.662:15981): pid=1608 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044505.662:15982): pid=1608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044505.682:15983): pid=1608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044506.212:15984): pid=1608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044506.212:15985): pid=1608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044506.373:15986): pid=1618 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044506.373:15987): pid=1618 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044506.373:15988): pid=1618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044506.391:15989): pid=1618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044506.923:15990): pid=1618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044506.923:15991): pid=1618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044507.081:15992): pid=1629 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044507.081:15993): pid=1629 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044507.081:15994): pid=1629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044507.088:15995): pid=1629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044507.293:15996): pid=1629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044507.294:15997): pid=1629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044507.412:15998): pid=1645 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044507.413:15999): pid=1645 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044507.413:16000): pid=1645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044507.428:16001): pid=1645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044507.695:16002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044507.695:16003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044507.696:16004): pid=1645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044507.696:16005): pid=1645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044507.697:16006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044507.719:16007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044508.191:16008): pid=1661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044508.191:16009): pid=1661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044508.191:16010): pid=1661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044508.194:16011): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1661 suid=74 rport=40716 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044508.194:16012): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1661 suid=74 rport=40716 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044508.252:16013): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40716 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044508.252:16014): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40716 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044508.262:16015): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044508.262:16016): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1661 suid=74 rport=40716 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044508.264:16017): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044508.264:16018): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044508.264:16019): pid=1660 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=403 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044508.436:16020): pid=1660 uid=0 auid=0 ses=403 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044508.462:16021): pid=1660 uid=0 auid=0 ses=403 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044508.505:16022): pid=1660 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044508.505:16023): pid=1660 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044508.507:16024): pid=1663 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044508.507:16025): pid=1663 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044508.507:16026): pid=1663 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044508.509:16027): pid=1663 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044508.536:16028): pid=1660 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044508.536:16029): pid=1660 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044508.536:16030): pid=1660 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044508.536:16031): pid=1660 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044508.536:16032): pid=1660 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1660 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044508.537:16033): pid=1660 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1660 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044508.537:16034): pid=1660 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1660 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044508.537:16035): pid=1660 uid=0 auid=0 ses=403 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1660 suid=0 rport=40716 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044511.579:16036): pid=1711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1711 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044511.579:16037): pid=1711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1711 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044511.579:16038): pid=1711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1711 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044511.581:16039): pid=1709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1711 suid=74 rport=40718 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044511.581:16040): pid=1709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1711 suid=74 rport=40718 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044511.657:16041): pid=1709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40718 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044511.657:16042): pid=1709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40718 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044511.666:16043): pid=1709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044511.667:16044): pid=1709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1711 suid=74 rport=40718 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044511.668:16045): pid=1709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044511.668:16046): pid=1709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044511.668:16047): pid=1709 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=404 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044511.830:16048): pid=1709 uid=0 auid=0 ses=404 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044511.852:16049): pid=1709 uid=0 auid=0 ses=404 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044511.894:16050): pid=1709 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044511.894:16051): pid=1709 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044511.895:16052): pid=1713 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044511.895:16053): pid=1713 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044511.895:16054): pid=1713 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1713 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044511.896:16055): pid=1713 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044511.918:16056): pid=1709 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044511.918:16057): pid=1709 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044511.918:16058): pid=1709 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044511.919:16059): pid=1709 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044511.919:16060): pid=1709 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1709 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044511.919:16061): pid=1709 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1709 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044511.919:16062): pid=1709 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1709 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044511.919:16063): pid=1709 uid=0 auid=0 ses=404 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1709 suid=0 rport=40718 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044512.818:16064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044512.818:16065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044512.820:16066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044512.839:16067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044514.962:16068): pid=1730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044514.962:16069): pid=1730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044514.962:16070): pid=1730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044514.964:16071): pid=1729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1730 suid=74 rport=40720 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044514.964:16072): pid=1729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1730 suid=74 rport=40720 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044515.025:16073): pid=1729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40720 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044515.026:16074): pid=1729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40720 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044515.032:16075): pid=1729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044515.033:16076): pid=1729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1730 suid=74 rport=40720 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044515.035:16077): pid=1729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044515.035:16078): pid=1729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044515.036:16079): pid=1729 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=405 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044515.225:16080): pid=1729 uid=0 auid=0 ses=405 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044515.258:16081): pid=1729 uid=0 auid=0 ses=405 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044515.301:16082): pid=1729 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044515.301:16083): pid=1729 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044515.303:16084): pid=1733 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044515.304:16085): pid=1733 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044515.304:16086): pid=1733 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044515.305:16087): pid=1733 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044515.338:16088): pid=1729 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044515.338:16089): pid=1729 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044515.339:16090): pid=1729 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044515.339:16091): pid=1729 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044515.340:16092): pid=1729 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044515.340:16093): pid=1729 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044515.340:16094): pid=1729 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044515.340:16095): pid=1729 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1729 suid=0 rport=40720 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_END msg=audit(1538044516.299:16096): pid=1390 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_limits,pam_unix acct="unbound" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044516.299:16097): pid=1390 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_rootok acct="unbound" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044516.460:16098): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="unbound-libs-1.6.6-1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044516.479:16099): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="lzop-1.03-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044516.524:16100): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libusbx-1.0.21-1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044516.558:16101): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libpciaccess-0.14-1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044516.608:16102): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libdrm-2.4.91-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044516.645:16103): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="usbredir-0.7.1-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044516.676:16104): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="gnutls-dane-3.3.29-8.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044516.815:16105): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="netcf-libs-0.2.8-4.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044516.901:16106): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="hivex-1.3.10-6.9.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044516.926:16107): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="perl-hivex-1.3.10-6.9.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044517.099:16108): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="ebtables-2.0.10-16.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044517.153:16109): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libusal-1.1.11-25.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044517.285:16110): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="genisoimage-1.1.11-25.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044517.965:16111): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="osinfo-db-20180531-1.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044517.992:16112): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="lsscsi-0.27-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044518.132:16113): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="opus-1.0.2-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044518.215:16114): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="supermin5-5.1.19-1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044518.253:16115): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libibumad-17.2-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044518.299:16116): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="attr-2.4.46-13.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044518.334:16117): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mesa-libglapi-18.0.5-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044518.370:16118): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libogg-2:1.3.0-7.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044518.395:16119): pid=1814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044518.395:16120): pid=1814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044518.395:16121): pid=1814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044518.397:16122): pid=1812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1814 suid=74 rport=40722 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044518.397:16123): pid=1812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1814 suid=74 rport=40722 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044518.414:16124): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="celt051-0.5.1.3-8.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538044518.489:16125): pid=1812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40722 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044518.489:16126): pid=1812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40722 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044518.498:16127): pid=1812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044518.499:16128): pid=1812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1814 suid=74 rport=40722 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044518.501:16129): pid=1812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044518.502:16130): pid=1812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044518.502:16131): pid=1812 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=406 res=1 >type=SOFTWARE_UPDATE msg=audit(1538044518.502:16132): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="spice-server-0.14.0-6.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044518.619:16133): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mtools-4.0.18-5.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538044518.749:16134): pid=1812 uid=0 auid=0 ses=406 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044518.780:16135): pid=1812 uid=0 auid=0 ses=406 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044518.823:16136): pid=1812 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044518.824:16137): pid=1812 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044518.826:16138): pid=1818 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044518.826:16139): pid=1818 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044518.826:16140): pid=1818 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044518.828:16141): pid=1818 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044518.855:16142): pid=1812 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044518.855:16143): pid=1812 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044518.855:16144): pid=1812 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044518.855:16145): pid=1812 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044518.855:16146): pid=1812 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1812 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044518.856:16147): pid=1812 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1812 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044518.856:16148): pid=1812 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1812 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044518.856:16149): pid=1812 uid=0 auid=0 ses=406 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1812 suid=0 rport=40722 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044518.938:16150): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="syslinux-4.05-15.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044519.056:16151): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="syslinux-extlinux-4.05-15.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044519.089:16152): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="seabios-bin-1.11.0-2.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044519.147:16153): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libepoxy-1.5.2-1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044519.162:16154): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="scrub-2.5.2-7.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044519.378:16155): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="numad-0.5-18.20150602git.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538044519.409:16156): pid=1843 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=984 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538044519.412:16157): pid=1843 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=984 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044519.915:16158): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044519.982:16159): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-storage-core-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.042:16160): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-network-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538044520.076:16161): pid=1900 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=36 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538044520.079:16162): pid=1900 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=36 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538044520.095:16163): pid=1905 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538044520.097:16164): pid=1905 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538044520.116:16165): pid=1911 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=107 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538044520.116:16166): pid=1911 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="kvm" acct="qemu" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538044520.116:16167): pid=1911 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-to-shadow-group grp="kvm" acct="qemu" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.264:16168): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-qemu-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.275:16169): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-storage-mpath-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.288:16170): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-storage-logical-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.300:16171): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-storage-scsi-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.312:16172): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-storage-rbd-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.325:16173): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-storage-disk-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.337:16174): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-storage-iscsi-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.350:16175): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-secret-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.366:16176): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-nwfilter-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.380:16177): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-nodedev-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.393:16178): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-interface-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.437:16179): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="psmisc-22.20-15.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.527:16180): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="cryptsetup-2.0.3-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044520.585:16181): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="gdisk-0.8.10-2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044521.048:16182): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="qemu-kvm-common-rhev-10:2.12.0-13.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044521.156:16183): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libarchive-3.1.2-10.el7_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044521.315:16184): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="osinfo-db-tools-1.1.0-1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044521.530:16185): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libosinfo-1.1.0-2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044521.542:16186): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libreport-filesystem-2.1.11-42.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044521.784:16187): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mdadm-4.1-rc1_2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044521.916:16188): pid=1976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044521.916:16189): pid=1976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044521.917:16190): pid=1976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044521.918:16191): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="ipxe-roms-qemu-20170123-1.git4e85b27.el7_4.1.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044521.920:16192): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1976 suid=74 rport=40724 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044521.920:16193): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=1976 suid=74 rport=40724 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044521.933:16194): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libcacard-40:2.5.2-2.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044521.957:16195): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="seavgabios-bin-1.11.0-2.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044521.970:16196): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-bash-completion-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044521.980:16197): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="sgabios-bin-1:0.20110622svn-4.el7.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538044521.999:16198): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40724 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044521.999:16199): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40724 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044522.008:16200): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044522.010:16201): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1976 suid=74 rport=40724 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044522.011:16202): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044522.011:16203): pid=1975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044522.011:16204): pid=1975 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=407 res=1 >type=SOFTWARE_UPDATE msg=audit(1538044522.033:16205): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="glusterfs-cli-3.12.2-18.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044522.060:16206): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-storage-gluster-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044522.070:16207): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-driver-storage-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044522.125:16208): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="dosfstools-3.0.20-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044522.179:16209): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libwayland-server-1.15.0-1.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538044522.201:16210): pid=1975 uid=0 auid=0 ses=407 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538044522.210:16211): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mesa-libgbm-18.0.5-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044522.221:16212): pid=1975 uid=0 auid=0 ses=407 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SOFTWARE_UPDATE msg=audit(1538044522.255:16213): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="librdmacm-17.2-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538044522.264:16214): pid=1975 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044522.265:16215): pid=1975 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044522.266:16216): pid=1981 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044522.266:16217): pid=1981 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044522.267:16218): pid=1981 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044522.268:16219): pid=1981 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044522.295:16220): pid=1975 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044522.296:16221): pid=1975 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044522.296:16222): pid=1975 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044522.296:16223): pid=1975 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044522.296:16224): pid=1975 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=1975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044522.296:16225): pid=1975 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=1975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044522.296:16226): pid=1975 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044522.296:16227): pid=1975 uid=0 auid=0 ses=407 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1975 suid=0 rport=40724 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044522.832:16228): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="qemu-kvm-rhev-10:2.12.0-13.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044522.841:16229): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-kvm-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044522.884:16230): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="autogen-libopts-5.18-5.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044522.941:16231): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="gnutls-utils-3.3.29-8.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044523.260:16232): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-client-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044523.295:16233): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="squashfs-tools-4.3-0.21.gitaae0aff4.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044523.339:16234): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="fuse-2.9.2-11.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044523.391:16235): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="fuse-libs-2.9.2-11.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044523.634:16236): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libguestfs-1:1.38.2-12.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044523.676:16237): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-libguestfs-1:1.38.2-12.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538044523.702:16238): pid=2015 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="qemu" acct="nova" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538044523.703:16239): pid=2015 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="qemu" acct="nova" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538044523.731:16240): pid=2020 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="libvirt" acct="nova" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538044523.731:16241): pid=2020 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="libvirt" acct="nova" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044523.863:16242): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-nova-compute-1:17.0.5-3.d7864fbgit.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1538044523.890:16243): pid=2044 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=983 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=GRP_MGMT msg=audit(1538044523.893:16244): pid=2044 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=983 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1538044523.903:16245): pid=2049 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user id=986 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044523.945:16246): pid=1316 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-nova-migration-1:17.0.5-3.d7864fbgit.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044525.353:16247): pid=2064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044525.353:16248): pid=2064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044525.354:16249): pid=2064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044525.356:16250): pid=2063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2064 suid=74 rport=40726 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044525.356:16251): pid=2063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2064 suid=74 rport=40726 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044525.453:16252): pid=2063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40726 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044525.453:16253): pid=2063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40726 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044525.463:16254): pid=2063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044525.464:16255): pid=2063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2064 suid=74 rport=40726 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044525.466:16256): pid=2063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044525.467:16257): pid=2063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044525.467:16258): pid=2063 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=408 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044525.718:16259): pid=2063 uid=0 auid=0 ses=408 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044525.750:16260): pid=2063 uid=0 auid=0 ses=408 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044525.794:16261): pid=2063 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044525.794:16262): pid=2063 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044525.796:16263): pid=2066 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044525.796:16264): pid=2066 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044525.796:16265): pid=2066 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2066 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044525.798:16266): pid=2066 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044525.834:16267): pid=2063 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044525.835:16268): pid=2063 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044525.836:16269): pid=2063 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044525.836:16270): pid=2063 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044525.837:16271): pid=2063 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044525.837:16272): pid=2063 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044525.837:16273): pid=2063 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044525.837:16274): pid=2063 uid=0 auid=0 ses=408 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2063 suid=0 rport=40726 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044526.888:16275): pid=13126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=13126 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044526.888:16276): pid=13126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=13126 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044526.888:16277): pid=13126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=13126 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044526.896:16278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044526.896:16279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044527.170:16280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044528.885:16281): pid=2128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044528.886:16282): pid=2128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044528.886:16283): pid=2128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044528.889:16284): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2128 suid=74 rport=40728 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044528.890:16285): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2128 suid=74 rport=40728 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044528.988:16286): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40728 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044528.988:16287): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=40728 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044528.998:16288): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044528.999:16289): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2128 suid=74 rport=40728 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044529.001:16290): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044529.001:16291): pid=2127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044529.002:16292): pid=2127 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=409 res=1 >type=SERVICE_START msg=audit(1538044529.068:16293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044529.068:16294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044529.072:16295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044529.096:16296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538044529.250:16297): pid=2127 uid=0 auid=0 ses=409 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044529.282:16298): pid=2127 uid=0 auid=0 ses=409 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044529.326:16299): pid=2127 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044529.327:16300): pid=2127 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044529.330:16301): pid=2133 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044529.330:16302): pid=2133 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044529.330:16303): pid=2133 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044529.332:16304): pid=2133 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044529.370:16305): pid=2127 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044529.371:16306): pid=2127 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044529.371:16307): pid=2127 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044529.372:16308): pid=2127 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044529.372:16309): pid=2127 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044529.372:16310): pid=2127 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044529.372:16311): pid=2127 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044529.372:16312): pid=2127 uid=0 auid=0 ses=409 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2127 suid=0 rport=40728 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044532.424:16313): pid=2156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044532.424:16314): pid=2156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044532.424:16315): pid=2156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2156 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044532.427:16316): pid=2155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2156 suid=74 rport=41108 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044532.427:16317): pid=2155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2156 suid=74 rport=41108 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044532.528:16318): pid=2155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044532.528:16319): pid=2155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=41108 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044532.538:16320): pid=2155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044532.539:16321): pid=2155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2156 suid=74 rport=41108 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044532.542:16322): pid=2155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044532.542:16323): pid=2155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044532.542:16324): pid=2155 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=410 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044532.784:16325): pid=2155 uid=0 auid=0 ses=410 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044532.822:16326): pid=2155 uid=0 auid=0 ses=410 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044532.867:16327): pid=2155 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044532.867:16328): pid=2155 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044532.869:16329): pid=2159 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044532.870:16330): pid=2159 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044532.870:16331): pid=2159 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044532.872:16332): pid=2159 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044532.914:16333): pid=2155 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044532.915:16334): pid=2155 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044532.915:16335): pid=2155 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044532.916:16336): pid=2155 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044532.916:16337): pid=2155 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2155 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044532.916:16338): pid=2155 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2155 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044532.916:16339): pid=2155 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2155 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044532.916:16340): pid=2155 uid=0 auid=0 ses=410 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2155 suid=0 rport=41108 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044533.717:16341): pid=2143 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libvirt-daemon-config-nwfilter-4.5.0-10.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044534.233:16342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044534.233:16343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044534.236:16344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044534.259:16345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044534.537:16346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=virtlockd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044535.966:16347): pid=2250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044535.966:16348): pid=2250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044535.966:16349): pid=2250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044535.969:16350): pid=2249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2250 suid=74 rport=41758 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044535.969:16351): pid=2249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2250 suid=74 rport=41758 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044536.069:16352): pid=2249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41758 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044536.069:16353): pid=2249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=41758 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044536.079:16354): pid=2249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044536.081:16355): pid=2249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2250 suid=74 rport=41758 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044536.082:16356): pid=2249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044536.083:16357): pid=2249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044536.084:16358): pid=2249 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=411 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044536.334:16359): pid=2249 uid=0 auid=0 ses=411 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044536.367:16360): pid=2249 uid=0 auid=0 ses=411 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044536.412:16361): pid=2249 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044536.413:16362): pid=2249 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044536.414:16363): pid=2259 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2259 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044536.414:16364): pid=2259 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2259 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044536.415:16365): pid=2259 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2259 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044536.416:16366): pid=2259 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044536.451:16367): pid=2249 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044536.451:16368): pid=2249 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044536.452:16369): pid=2249 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044536.452:16370): pid=2249 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044536.452:16371): pid=2249 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044536.452:16372): pid=2249 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044536.453:16373): pid=2249 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044536.453:16374): pid=2249 uid=0 auid=0 ses=411 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2249 suid=0 rport=41758 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044536.642:16375): table=filter family=2 entries=31 >type=SYSCALL msg=audit(1538044536.642:16375): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=86ffe0 items=0 ppid=517 pid=2263 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=378 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044536.642:16375): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E505554003137002D2D77616974002D740066696C746572002D73003137322E31362E312E31332F3332002D7000746370002D6D006D756C7469706F7274002D2D64706F7274730031363530392C34393135323A3439323135002D6A00414343455054002D6D00636F >type=NETFILTER_CFG msg=audit(1538044537.001:16376): table=filter family=2 entries=32 >type=SYSCALL msg=audit(1538044537.001:16376): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2257440 items=0 ppid=517 pid=2298 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=378 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044537.001:16376): proctitle=2F7573722F7362696E2F69707461626C6573002D4900494E505554003137002D2D77616974002D740066696C746572002D73003137322E31362E312E31332F3332002D7000746370002D6D006D756C7469706F7274002D2D64706F72747300353930303A35393939002D6A00414343455054002D6D00636F6D6D656E74002D2D >type=USER_MGMT msg=audit(1538044537.899:16377): pid=2329 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="nova" acct="ceilometer" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=USER_MGMT msg=audit(1538044537.899:16378): pid=2329 uid=0 auid=0 ses=378 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="nova" acct="ceilometer" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044539.491:16379): pid=2353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044539.492:16380): pid=2353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044539.492:16381): pid=2353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044539.494:16382): pid=2352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2353 suid=74 rport=41760 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044539.495:16383): pid=2352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2353 suid=74 rport=41760 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044539.568:16384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044539.568:16385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044539.571:16386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044539.591:16387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_AUTH msg=audit(1538044539.599:16388): pid=2352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41760 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044539.599:16389): pid=2352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=41760 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044539.608:16390): pid=2352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044539.609:16391): pid=2352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2353 suid=74 rport=41760 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044539.612:16392): pid=2352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044539.612:16393): pid=2352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044539.612:16394): pid=2352 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=412 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044539.852:16395): pid=2352 uid=0 auid=0 ses=412 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044539.874:16396): pid=2352 uid=0 auid=0 ses=412 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044539.919:16397): pid=2352 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044539.919:16398): pid=2352 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044539.922:16399): pid=2358 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044539.922:16400): pid=2358 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044539.922:16401): pid=2358 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044539.923:16402): pid=2358 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044539.959:16403): pid=2352 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044539.960:16404): pid=2352 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044539.960:16405): pid=2352 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044539.960:16406): pid=2352 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044539.961:16407): pid=2352 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2352 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044539.961:16408): pid=2352 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2352 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044539.961:16409): pid=2352 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2352 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044539.961:16410): pid=2352 uid=0 auid=0 ses=412 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2352 suid=0 rport=41760 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044540.251:16411): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044540.251:16411): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044540.251:16411): table=raw family=2 entries=0 >type=SYSCALL msg=audit(1538044540.251:16411): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7ffd9a9666c0 a2=fffffffffffffff5 a3=22 items=0 ppid=1 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(machined)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044540.251:16411): proctitle="(machined)" >type=SERVICE_START msg=audit(1538044540.537:16412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-machined comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044540.638:16413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=libvirtd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044543.008:16414): pid=2482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044543.009:16415): pid=2482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044543.009:16416): pid=2482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044543.011:16417): pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2482 suid=74 rport=41762 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044543.011:16418): pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2482 suid=74 rport=41762 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044543.111:16419): pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41762 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044543.111:16420): pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=41762 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044543.121:16421): pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044543.122:16422): pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2482 suid=74 rport=41762 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044543.123:16423): pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044543.123:16424): pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044543.124:16425): pid=2481 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=413 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044543.298:16426): pid=2481 uid=0 auid=0 ses=413 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044543.332:16427): pid=2481 uid=0 auid=0 ses=413 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044543.375:16428): pid=2481 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044543.375:16429): pid=2481 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044543.378:16430): pid=2485 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044543.378:16431): pid=2485 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044543.378:16432): pid=2485 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044543.379:16433): pid=2485 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044543.416:16434): pid=2481 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044543.417:16435): pid=2481 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044543.418:16436): pid=2481 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044543.418:16437): pid=2481 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044543.418:16438): pid=2481 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044543.419:16439): pid=2481 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044543.419:16440): pid=2481 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044543.419:16441): pid=2481 uid=0 auid=0 ses=413 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2481 suid=0 rport=41762 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044544.394:16442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-ceilometer-polling comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044546.479:16443): pid=2710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044546.480:16444): pid=2710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044546.480:16445): pid=2710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044546.483:16446): pid=2707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2710 suid=74 rport=41764 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044546.483:16447): pid=2707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2710 suid=74 rport=41764 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044546.545:16448): pid=2707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41764 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044546.545:16449): pid=2707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=41764 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044546.555:16450): pid=2707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044546.557:16451): pid=2707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2710 suid=74 rport=41764 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044546.559:16452): pid=2707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044546.559:16453): pid=2707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044546.560:16454): pid=2707 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=414 res=1 >type=USER_ACCT msg=audit(1538044546.732:16455): pid=2731 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="ceilometer" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044546.733:16456): pid=2731 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/" cmd=6365696C6F6D657465722D726F6F7477726170202F6574632F6365696C6F6D657465722F726F6F74777261702E636F6E662069706D69746F6F6C2073647220696E666F terminal=? res=success' >type=CRED_REFR msg=audit(1538044546.733:16457): pid=2731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538044546.744:16458): pid=2707 uid=0 auid=0 ses=414 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044546.772:16459): pid=2731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044546.775:16460): pid=2707 uid=0 auid=0 ses=414 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044546.819:16461): pid=2707 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044546.819:16462): pid=2707 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044546.820:16463): pid=2734 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044546.820:16464): pid=2734 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044546.820:16465): pid=2734 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044546.822:16466): pid=2734 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044546.850:16467): pid=2707 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044546.850:16468): pid=2707 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044546.852:16469): pid=2707 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044546.852:16470): pid=2707 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044546.852:16471): pid=2707 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2707 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044546.852:16472): pid=2707 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2707 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044546.853:16473): pid=2707 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2707 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044546.853:16474): pid=2707 uid=0 auid=0 ses=414 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2707 suid=0 rport=41764 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_END msg=audit(1538044547.315:16475): pid=2731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044547.315:16476): pid=2731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044547.343:16477): pid=2742 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="ceilometer" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044547.343:16478): pid=2742 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/" cmd=6365696C6F6D657465722D726F6F7477726170202F6574632F6365696C6F6D657465722F726F6F74777261702E636F6E662069706D69746F6F6C20726177203078306120307832632030783030 terminal=? res=success' >type=CRED_REFR msg=audit(1538044547.343:16479): pid=2742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044547.359:16480): pid=2742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044547.678:16481): pid=2742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044547.678:16482): pid=2742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044547.703:16483): pid=2750 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="ceilometer" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044547.703:16484): pid=2750 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/" cmd=6365696C6F6D657465722D726F6F7477726170202F6574632F6365696C6F6D657465722F726F6F74777261702E636F6E662069706D69746F6F6C20726177203078306120307832632030783030 terminal=? res=success' >type=CRED_REFR msg=audit(1538044547.704:16485): pid=2750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044547.720:16486): pid=2750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044547.949:16487): pid=2750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044547.949:16488): pid=2750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044547.981:16489): pid=2757 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="ceilometer" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044547.981:16490): pid=2757 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/" cmd=6365696C6F6D657465722D726F6F7477726170202F6574632F6365696C6F6D657465722F726F6F74777261702E636F6E662069706D69746F6F6C20726177203078306120307832632030783030 terminal=? res=success' >type=CRED_REFR msg=audit(1538044547.982:16491): pid=2757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044547.989:16492): pid=2757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044548.297:16493): pid=2757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044548.297:16494): pid=2757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044548.330:16495): pid=2765 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="ceilometer" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044548.330:16496): pid=2765 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/" cmd=6365696C6F6D657465722D726F6F7477726170202F6574632F6365696C6F6D657465722F726F6F74777261702E636F6E662069706D69746F6F6C20726177203078306120307832632030783030 terminal=? res=success' >type=CRED_REFR msg=audit(1538044548.331:16497): pid=2765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044548.342:16498): pid=2765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044548.517:16499): pid=2765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044548.517:16500): pid=2765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044548.542:16501): pid=2772 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="ceilometer" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044548.542:16502): pid=2772 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/" cmd=6365696C6F6D657465722D726F6F7477726170202F6574632F6365696C6F6D657465722F726F6F74777261702E636F6E662069706D69746F6F6C20726177203078306120307832632030783030 terminal=? res=success' >type=CRED_REFR msg=audit(1538044548.543:16503): pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044548.557:16504): pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044548.739:16505): pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044548.739:16506): pid=2772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044548.773:16507): pid=2780 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="ceilometer" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044548.774:16508): pid=2780 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/" cmd=6365696C6F6D657465722D726F6F7477726170202F6574632F6365696C6F6D657465722F726F6F74777261702E636F6E662069706D69746F6F6C20726177203078306120307832632030783030 terminal=? res=success' >type=CRED_REFR msg=audit(1538044548.774:16509): pid=2780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044548.791:16510): pid=2780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044548.972:16511): pid=2780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044548.972:16512): pid=2780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044549.006:16513): pid=2786 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="ceilometer" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044549.007:16514): pid=2786 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/" cmd=6365696C6F6D657465722D726F6F7477726170202F6574632F6365696C6F6D657465722F726F6F74777261702E636F6E662069706D69746F6F6C20726177203078306120307832632030783030 terminal=? res=success' >type=CRED_REFR msg=audit(1538044549.007:16515): pid=2786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044549.018:16516): pid=2786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044549.511:16517): pid=2786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044549.511:16518): pid=2786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044549.538:16519): pid=2794 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="ceilometer" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044549.538:16520): pid=2794 uid=166 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/" cmd=6365696C6F6D657465722D726F6F7477726170202F6574632F6365696C6F6D657465722F726F6F74777261702E636F6E662069706D69746F6F6C20726177203078306120307832632030783030 terminal=? res=success' >type=CRED_REFR msg=audit(1538044549.538:16521): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044549.568:16522): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044549.757:16523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-nova-compute comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044549.907:16524): pid=2804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044549.907:16525): pid=2804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044549.907:16526): pid=2804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044549.911:16527): pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2804 suid=74 rport=41772 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044549.911:16528): pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2804 suid=74 rport=41772 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_END msg=audit(1538044549.964:16529): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044549.964:16530): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1538044550.002:16531): pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41772 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044550.002:16532): pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=41772 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044550.011:16533): pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044550.013:16534): pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2804 suid=74 rport=41772 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044550.015:16535): pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044550.015:16536): pid=2803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044550.015:16537): pid=2803 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=415 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044550.261:16538): pid=2803 uid=0 auid=0 ses=415 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044550.384:16539): pid=2803 uid=0 auid=0 ses=415 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044550.429:16540): pid=2803 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044550.429:16541): pid=2803 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044550.429:16542): pid=2853 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2853 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044550.430:16543): pid=2853 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2853 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044550.430:16544): pid=2853 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2853 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044550.430:16545): pid=2853 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044550.463:16546): pid=2803 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044550.463:16547): pid=2803 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044550.464:16548): pid=2803 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044550.464:16549): pid=2803 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044550.464:16550): pid=2803 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044550.464:16551): pid=2803 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044550.464:16552): pid=2803 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044550.464:16553): pid=2803 uid=0 auid=0 ses=415 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2803 suid=0 rport=41772 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044553.527:16554): pid=2916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044553.527:16555): pid=2916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044553.527:16556): pid=2916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044553.532:16557): pid=2915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2916 suid=74 rport=41794 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044553.532:16558): pid=2915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2916 suid=74 rport=41794 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044553.635:16559): pid=2915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41794 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044553.635:16560): pid=2915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=41794 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044553.647:16561): pid=2915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044553.648:16562): pid=2915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2916 suid=74 rport=41794 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044553.650:16563): pid=2915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044553.651:16564): pid=2915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044553.652:16565): pid=2915 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=416 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044553.902:16566): pid=2915 uid=0 auid=0 ses=416 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044553.934:16567): pid=2915 uid=0 auid=0 ses=416 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044553.978:16568): pid=2915 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044553.979:16569): pid=2915 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044553.981:16570): pid=2919 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044553.981:16571): pid=2919 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044553.981:16572): pid=2919 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044553.983:16573): pid=2919 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044554.039:16574): pid=2915 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044554.040:16575): pid=2915 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044554.040:16576): pid=2915 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044554.041:16577): pid=2915 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044554.041:16578): pid=2915 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044554.041:16579): pid=2915 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044554.041:16580): pid=2915 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044554.041:16581): pid=2915 uid=0 auid=0 ses=416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2915 suid=0 rport=41794 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=SERVICE_START msg=audit(1538044555.568:16582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044555.568:16583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044555.571:16584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044555.739:16585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1538044557.087:16586): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044557.088:16587): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044557.088:16588): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044557.091:16589): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2963 suid=74 rport=41800 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044557.091:16590): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2963 suid=74 rport=41800 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044557.198:16591): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41800 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044557.198:16592): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=41800 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044557.208:16593): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044557.209:16594): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2963 suid=74 rport=41800 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044557.211:16595): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044557.212:16596): pid=2962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044557.212:16597): pid=2962 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=417 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044557.460:16598): pid=2962 uid=0 auid=0 ses=417 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044557.496:16599): pid=2962 uid=0 auid=0 ses=417 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044557.541:16600): pid=2962 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044557.541:16601): pid=2962 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044557.544:16602): pid=2966 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044557.544:16603): pid=2966 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044557.544:16604): pid=2966 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044557.546:16605): pid=2966 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044557.595:16606): pid=2962 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044557.596:16607): pid=2962 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044557.597:16608): pid=2962 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044557.597:16609): pid=2962 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044557.597:16610): pid=2962 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044557.597:16611): pid=2962 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044557.597:16612): pid=2962 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044557.598:16613): pid=2962 uid=0 auid=0 ses=417 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2962 suid=0 rport=41800 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044560.654:16614): pid=2976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044560.654:16615): pid=2976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044560.654:16616): pid=2976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044560.662:16617): pid=2975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2976 suid=74 rport=41804 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044560.662:16618): pid=2975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=2976 suid=74 rport=41804 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044560.758:16619): pid=2975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41804 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044560.758:16620): pid=2975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=41804 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044560.767:16621): pid=2975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044560.768:16622): pid=2975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2976 suid=74 rport=41804 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044560.771:16623): pid=2975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044560.771:16624): pid=2975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044560.772:16625): pid=2975 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=418 res=1 >type=SERVICE_START msg=audit(1538044560.818:16626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044560.819:16627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044560.820:16628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044560.848:16629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ROLE_CHANGE msg=audit(1538044561.014:16630): pid=2975 uid=0 auid=0 ses=418 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044561.045:16631): pid=2975 uid=0 auid=0 ses=418 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044561.090:16632): pid=2975 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044561.090:16633): pid=2975 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044561.093:16634): pid=2982 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044561.093:16635): pid=2982 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044561.093:16636): pid=2982 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044561.095:16637): pid=2982 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044561.149:16638): pid=2975 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044561.149:16639): pid=2975 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044561.150:16640): pid=2975 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044561.150:16641): pid=2975 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044561.150:16642): pid=2975 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=2975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044561.151:16643): pid=2975 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=2975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044561.151:16644): pid=2975 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044561.151:16645): pid=2975 uid=0 auid=0 ses=418 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2975 suid=0 rport=41804 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044561.727:16646): pid=2986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044561.727:16647): pid=2986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044561.727:16648): pid=2986 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=419 res=1 >type=USER_START msg=audit(1538044561.774:16649): pid=2986 uid=0 auid=163 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044561.775:16650): pid=2986 uid=0 auid=163 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1538044563.368:16651): pid=2986 uid=0 auid=163 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044563.372:16652): pid=2986 uid=0 auid=163 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1538044564.206:16653): pid=3023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=3023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044564.206:16654): pid=3023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=3023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044564.206:16655): pid=3023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044564.210:16656): pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3023 suid=74 rport=41810 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044564.210:16657): pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3023 suid=74 rport=41810 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044564.314:16658): pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41810 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044564.314:16659): pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=41810 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044564.320:16660): pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044564.321:16661): pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3023 suid=74 rport=41810 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044564.323:16662): pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044564.323:16663): pid=3022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044564.324:16664): pid=3022 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=420 res=1 >type=USER_ROLE_CHANGE msg=audit(1538044564.567:16665): pid=3022 uid=0 auid=0 ses=420 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044564.598:16666): pid=3022 uid=0 auid=0 ses=420 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044564.641:16667): pid=3022 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044564.641:16668): pid=3022 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044564.644:16669): pid=3026 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=3026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044564.644:16670): pid=3026 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=3026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044564.644:16671): pid=3026 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044564.646:16672): pid=3026 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044564.700:16673): pid=3022 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044564.700:16674): pid=3022 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044564.701:16675): pid=3022 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044564.701:16676): pid=3022 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044564.701:16677): pid=3022 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=3022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044564.702:16678): pid=3022 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=3022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044564.702:16679): pid=3022 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044564.702:16680): pid=3022 uid=0 auid=0 ses=420 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3022 suid=0 rport=41810 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044565.423:16681): pid=3032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=3032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044565.423:16682): pid=3032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=3032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044565.423:16683): pid=3032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044565.428:16684): pid=3031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3032 suid=74 rport=41812 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1538044565.428:16685): pid=3031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=3032 suid=74 rport=41812 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044565.484:16686): pid=3031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=41812 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044565.484:16687): pid=3031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=SHA256:42:58:8c:b8:43:1a:af:c5:f0:38:53:39:9c:c3:45:1c:82:9c:1c:95:d8:ea:c0:08:74:b3:3c:c5:60:dd:90:20 rport=41812 acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044565.492:16688): pid=3031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044565.493:16689): pid=3031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3032 suid=74 rport=41812 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_AUTH msg=audit(1538044565.497:16690): pid=3031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1538044565.497:16691): pid=3031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=LOGIN msg=audit(1538044565.497:16692): pid=3031 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=421 res=1 >type=USER_ACCT msg=audit(1538044565.660:16693): pid=3034 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044565.661:16694): pid=3034 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044565.662:16695): pid=3034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1538044565.690:16696): pid=3031 uid=0 auid=0 ses=421 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044565.692:16697): pid=3034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044565.720:16698): pid=3031 uid=0 auid=0 ses=421 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044565.765:16699): pid=3031 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_START msg=audit(1538044565.766:16700): pid=3031 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044565.768:16701): pid=3038 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=3038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044565.768:16702): pid=3038 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=3038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044565.768:16703): pid=3038 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044565.770:16704): pid=3038 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538044565.920:16705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044565.920:16706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044565.921:16707): pid=3034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044565.921:16708): pid=3034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044565.922:16709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044565.952:16710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044566.042:16711): pid=3031 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538044566.043:16712): pid=3031 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_END msg=audit(1538044566.043:16713): pid=3031 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044566.044:16714): pid=3031 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=172.16.1.13 addr=172.16.1.13 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044566.044:16715): pid=3031 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:3b:2f:72:e0:a2:e0:18:a5:af:7e:ac:2e:ba:64:0a:6a:26:c7:ef:30:c5:3c:45:53:d3:9d:a3:d8:d4:7d:ad:50 direction=? spid=3031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044566.044:16716): pid=3031 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0b:e9:0f:f8:60:2f:02:28:3d:74:c9:b5:95:d4:ba:db:e6:e0:9e:71:17:83:8c:de:bf:ed:3f:e1:e6:d9:f1:65 direction=? spid=3031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044566.044:16717): pid=3031 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538044566.044:16718): pid=3031 uid=0 auid=0 ses=421 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3031 suid=0 rport=41812 laddr=172.16.1.13 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.16.1.13 terminal=? res=success' >type=USER_ACCT msg=audit(1538044566.056:16719): pid=3055 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044566.056:16720): pid=3055 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044566.057:16721): pid=3055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044566.082:16722): pid=3055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044566.194:16723): pid=11603 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044566.194:16724): pid=11603 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044566.205:16725): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044566.205:16726): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044566.348:16727): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044566.348:16728): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044566.352:16729): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3071 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044566.369:16730): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044566.369:16731): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044566.380:16732): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044566.381:16733): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044566.382:16734): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3079 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044566.401:16735): pid=3055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044566.401:16736): pid=3055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044566.403:16737): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044566.403:16738): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044566.417:16739): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044566.417:16740): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044566.418:16741): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3093 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044566.445:16742): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044566.446:16743): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044566.457:16744): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044566.457:16745): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044566.458:16746): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3100 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044566.480:16747): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044566.480:16748): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044566.505:16749): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044566.506:16750): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044566.512:16751): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3110 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044566.558:16752): pid=3092 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044566.558:16753): pid=3092 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044566.559:16754): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044566.560:16755): pid=3123 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044566.561:16756): pid=3123 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044566.561:16757): pid=3123 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044566.574:16758): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044566.574:16759): pid=3123 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044566.860:16760): pid=3123 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044566.861:16761): pid=3123 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044566.866:16762): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044566.866:16763): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044567.009:16764): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044567.009:16765): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044567.010:16766): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3134 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044567.028:16767): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044567.029:16768): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044567.038:16769): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044567.038:16770): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044567.041:16771): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3142 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044567.064:16772): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044567.064:16773): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044567.078:16774): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044567.078:16775): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044567.079:16776): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3156 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044567.115:16777): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044567.115:16778): pid=3092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044567.117:16779): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044567.117:16780): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044567.128:16781): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044567.129:16782): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044567.130:16783): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3165 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044567.154:16784): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044567.154:16785): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044567.166:16786): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044567.166:16787): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044567.167:16788): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3174 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044567.218:16789): pid=3187 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044567.218:16790): pid=3187 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044567.219:16791): pid=3187 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044567.222:16792): pid=3187 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1538044567.276:16793): pid=3164 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044567.277:16794): pid=3164 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044567.277:16795): pid=3164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044567.295:16796): pid=3164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044567.517:16797): pid=3187 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044567.517:16798): pid=3187 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044567.522:16799): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044567.522:16800): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044567.685:16801): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044567.685:16802): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044567.686:16803): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3200 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044567.709:16804): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044567.709:16805): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044567.720:16806): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044567.720:16807): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044567.721:16808): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3208 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044567.747:16809): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044567.747:16810): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044567.760:16811): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044567.761:16812): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044567.762:16813): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3220 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044567.809:16814): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044567.809:16815): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044567.820:16816): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044567.821:16817): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044567.822:16818): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3229 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044567.837:16819): pid=3164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044567.837:16820): pid=3164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044567.840:16821): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044567.840:16822): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044567.853:16823): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044567.854:16824): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044567.855:16825): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3240 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044567.900:16826): pid=3253 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044567.901:16827): pid=3253 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044567.901:16828): pid=3253 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044567.904:16829): pid=3253 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044568.238:16830): pid=3253 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044568.238:16831): pid=3253 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044568.241:16832): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044568.242:16833): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044568.406:16834): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044568.406:16835): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044568.407:16836): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3260 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044568.429:16837): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044568.429:16838): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044568.440:16839): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044568.440:16840): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044568.442:16841): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3268 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044568.465:16842): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044568.465:16843): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044568.478:16844): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044568.478:16845): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044568.479:16846): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3280 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044568.511:16847): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044568.511:16848): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044568.522:16849): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044568.522:16850): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044568.523:16851): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3289 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044568.549:16852): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044568.549:16853): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044568.561:16854): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044568.561:16855): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044568.562:16856): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3298 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044568.617:16857): pid=3311 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044568.618:16858): pid=3311 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A7269706D646C6375796D636863646C6C687563786A716D7A6270657572633B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034343536382E34312D3234373038363032373235323035372F696E695F66696C652E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034343536382E34312D3234373038363032373235323035372F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044568.618:16859): pid=3311 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044568.623:16860): pid=3311 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044568.997:16861): pid=3311 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044568.997:16862): pid=3311 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044569.001:16863): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044569.001:16864): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044569.151:16865): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044569.151:16866): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044569.152:16867): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3325 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044569.175:16868): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044569.176:16869): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044569.189:16870): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044569.189:16871): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044569.191:16872): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3337 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044569.218:16873): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044569.219:16874): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044569.239:16875): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044569.239:16876): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044569.242:16877): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3351 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044569.279:16878): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044569.279:16879): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044569.291:16880): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044569.291:16881): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044569.292:16882): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3358 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044569.314:16883): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044569.314:16884): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044569.328:16885): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044569.328:16886): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044569.329:16887): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3367 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044569.378:16888): pid=3380 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044569.378:16889): pid=3380 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044569.379:16890): pid=3380 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044569.384:16891): pid=3380 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538044569.855:16892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-nova-compute comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044569.855:16893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-nova-compute comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044571.067:16894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044571.067:16895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044571.070:16896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044571.086:16897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044576.317:16898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044576.317:16899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044576.319:16900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044576.328:16901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044577.072:16902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-nova-compute comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044577.096:16903): pid=3380 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044577.096:16904): pid=3380 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044577.104:16905): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044577.105:16906): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044577.257:16907): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044577.257:16908): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044577.258:16909): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3453 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044577.282:16910): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044577.283:16911): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044577.295:16912): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044577.295:16913): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044577.296:16914): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3461 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044577.316:16915): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044577.316:16916): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044577.332:16917): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044577.332:16918): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044577.333:16919): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3474 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044577.362:16920): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044577.362:16921): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044577.373:16922): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044577.374:16923): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044577.375:16924): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3481 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044577.394:16925): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044577.394:16926): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044577.410:16927): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044577.410:16928): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044577.412:16929): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3490 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044577.453:16930): pid=3503 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044577.454:16931): pid=3503 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044577.454:16932): pid=3503 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044577.464:16933): pid=3503 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044577.828:16934): pid=3503 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044577.828:16935): pid=3503 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044577.832:16936): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044577.832:16937): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044577.940:16938): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044577.940:16939): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044577.941:16940): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3541 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044577.956:16941): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044577.956:16942): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044577.966:16943): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044577.966:16944): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044577.967:16945): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3549 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044577.987:16946): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044577.987:16947): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044578.000:16948): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044578.000:16949): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044578.001:16950): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3562 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044578.030:16951): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044578.030:16952): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044578.043:16953): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044578.043:16954): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044578.044:16955): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3569 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044578.059:16956): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044578.059:16957): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044578.075:16958): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044578.075:16959): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044578.076:16960): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3578 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044578.128:16961): pid=3591 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044578.128:16962): pid=3591 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044578.128:16963): pid=3591 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044578.133:16964): pid=3591 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044578.333:16965): pid=3591 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044578.333:16966): pid=3591 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044578.336:16967): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044578.336:16968): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044578.482:16969): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044578.483:16970): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044578.484:16971): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3598 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044578.500:16972): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044578.500:16973): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044578.511:16974): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044578.511:16975): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044578.512:16976): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3606 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044578.532:16977): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044578.532:16978): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044578.546:16979): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044578.546:16980): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044578.547:16981): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3618 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044578.583:16982): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044578.583:16983): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044578.594:16984): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044578.595:16985): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044578.596:16986): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3626 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044578.619:16987): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044578.619:16988): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044578.632:16989): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044578.633:16990): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044578.634:16991): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3635 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044578.672:16992): pid=3648 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044578.673:16993): pid=3648 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044578.673:16994): pid=3648 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044578.676:16995): pid=3648 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538044581.567:16996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044581.567:16997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044581.569:16998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044581.595:16999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044586.817:17000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044586.817:17001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044586.819:17002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044586.831:17003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044592.067:17004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044592.067:17005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044592.069:17006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044592.077:17007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044597.317:17008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044597.317:17009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044597.318:17010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044597.325:17011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044602.567:17012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044602.567:17013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044602.568:17014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044602.574:17015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044607.817:17016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044607.817:17017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044607.819:17018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044607.828:17019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044613.067:17020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044613.067:17021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044613.069:17022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044613.079:17023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044618.317:17024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044618.317:17025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044618.319:17026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044618.326:17027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044621.396:17028): pid=3740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044621.397:17029): pid=3740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044621.398:17030): pid=3740 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=422 res=1 >type=USER_START msg=audit(1538044621.424:17031): pid=3740 uid=0 auid=163 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044621.424:17032): pid=3740 uid=0 auid=163 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538044623.567:17033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044623.567:17034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044623.570:17035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044623.586:17036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRED_DISP msg=audit(1538044624.040:17037): pid=3740 uid=0 auid=163 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044624.044:17038): pid=3740 uid=0 auid=163 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538044626.047:17039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-cinder-volume comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044626.047:17040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-cinder-volume comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044626.050:17041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-cinder-volume comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044626.080:17042): pid=3648 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044626.080:17043): pid=3648 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044626.088:17044): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044626.088:17045): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044626.147:17046): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044626.148:17047): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044626.149:17048): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3769 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044626.176:17049): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044626.176:17050): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044626.187:17051): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044626.187:17052): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044626.188:17053): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3777 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044626.214:17054): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044626.214:17055): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044626.227:17056): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044626.228:17057): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044626.229:17058): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3789 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044626.266:17059): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044626.266:17060): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044626.279:17061): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044626.279:17062): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044626.280:17063): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3796 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044626.305:17064): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044626.305:17065): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044626.323:17066): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044626.323:17067): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044626.325:17068): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3808 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044626.391:17069): pid=3823 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044626.391:17070): pid=3823 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636C6B69686661646178786A6E6D6F78756B686A6E766B66657A636B62726E773B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034343632362E31352D31303133343732373536353836362F73797374656D642E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034343632362E31352D31303133343732373536353836362F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044626.392:17071): pid=3823 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044626.406:17072): pid=3823 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538044627.233:17073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-cinder-api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044627.234:17074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-cinder-api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044627.239:17075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openstack-cinder-api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044627.256:17076): pid=3823 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044627.256:17077): pid=3823 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044627.261:17078): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044627.261:17079): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044627.588:17080): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044627.589:17081): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044627.590:17082): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3847 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044627.613:17083): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044627.613:17084): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044627.629:17085): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044627.630:17086): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044627.631:17087): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3855 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044627.662:17088): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044627.662:17089): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044627.675:17090): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044627.675:17091): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044627.677:17092): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3867 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044627.718:17093): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044627.718:17094): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044627.729:17095): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044627.729:17096): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044627.731:17097): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3874 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044627.756:17098): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044627.756:17099): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044627.768:17100): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044627.769:17101): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044627.770:17102): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=3883 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044628.817:17103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044628.817:17104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044628.819:17105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044628.836:17106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044631.861:17107): pid=4124 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044631.862:17108): pid=4124 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D76657273696F6E terminal=? res=success' >type=CRED_REFR msg=audit(1538044631.863:17109): pid=4124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044631.881:17110): pid=4124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044632.168:17111): pid=4124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044632.169:17112): pid=4124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044632.294:17113): pid=4136 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044632.294:17114): pid=4136 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D6F206E616D652063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044632.295:17115): pid=4136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044632.304:17116): pid=4136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044632.536:17117): pid=4136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044632.537:17118): pid=4136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044632.638:17119): pid=4209 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044632.638:17120): pid=4209 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044632.638:17121): pid=4209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044632.655:17122): pid=4209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044632.990:17123): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044632.990:17124): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044632.994:17125): pid=4209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044632.994:17126): pid=4209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044633.119:17127): pid=4305 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044633.119:17128): pid=4305 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D76657273696F6E terminal=? res=success' >type=CRED_REFR msg=audit(1538044633.120:17129): pid=4305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044633.134:17130): pid=4305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538044633.154:17131): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044633.154:17132): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044633.155:17133): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4308 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044633.176:17134): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044633.176:17135): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044633.188:17136): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044633.188:17137): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044633.189:17138): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4316 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044633.212:17139): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044633.212:17140): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044633.227:17141): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044633.227:17142): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044633.228:17143): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4328 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044633.256:17144): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044633.257:17145): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044633.269:17146): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044633.269:17147): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044633.270:17148): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4335 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044633.289:17149): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044633.289:17150): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044633.306:17151): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044633.306:17152): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044633.308:17153): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4344 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044633.637:17154): pid=4305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044633.637:17155): pid=4305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044633.684:17156): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044633.684:17157): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1538044633.768:17158): pid=4366 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044633.769:17159): pid=4366 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D4B2063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044633.769:17160): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044633.779:17161): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538044633.781:17162): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044633.781:17163): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044633.783:17164): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4371 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044633.797:17165): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044633.797:17166): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044633.809:17167): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044633.809:17168): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044633.810:17169): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4379 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044633.831:17170): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044633.832:17171): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044633.846:17172): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044633.846:17173): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044633.847:17174): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4391 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044633.878:17175): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044633.879:17176): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044633.891:17177): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044633.892:17178): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044633.893:17179): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4398 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044633.913:17180): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044633.914:17181): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044633.926:17182): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044633.927:17183): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044633.928:17184): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4407 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044633.984:17185): pid=4420 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044633.984:17186): pid=4420 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044633.984:17187): pid=4420 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538044633.992:17188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044633.992:17189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044633.993:17190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044633.998:17191): pid=4420 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1538044634.022:17192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044634.308:17193): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044634.308:17194): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044634.444:17195): pid=4464 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044634.445:17196): pid=4464 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D76657273696F6E terminal=? res=success' >type=CRED_REFR msg=audit(1538044634.445:17197): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044634.459:17198): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044634.777:17199): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044634.777:17200): pid=4464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044634.900:17201): pid=4481 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044634.900:17202): pid=4481 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320707673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A652C66726565202D2D736570617261746F72207C202D2D6E6F737566666978202D2D69676E6F7265736B6970706564636C7573746572 terminal=? res=success' >type=CRED_REFR msg=audit(1538044634.900:17203): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044634.910:17204): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044635.129:17205): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044635.129:17206): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044635.234:17207): pid=4489 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044635.235:17208): pid=4489 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044635.235:17209): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044635.245:17210): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044635.657:17211): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044635.657:17212): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044635.749:17213): pid=4497 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044635.749:17214): pid=4497 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044635.749:17215): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044635.757:17216): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044636.065:17217): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044636.065:17218): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044636.159:17219): pid=4506 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044636.160:17220): pid=4506 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044636.160:17221): pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044636.177:17222): pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044636.696:17223): pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044636.696:17224): pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044636.854:17225): pid=4516 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044636.854:17226): pid=4516 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044636.854:17227): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044636.874:17228): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044637.403:17229): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044637.403:17230): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044637.565:17231): pid=4529 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044637.565:17232): pid=4529 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D76657273696F6E terminal=? res=success' >type=CRED_REFR msg=audit(1538044637.565:17233): pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044637.582:17234): pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044638.110:17235): pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044638.111:17236): pid=4529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044638.272:17237): pid=4538 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044638.272:17238): pid=4538 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044638.273:17239): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044638.287:17240): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044638.647:17241): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044638.647:17242): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044638.808:17243): pid=4550 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044638.808:17244): pid=4550 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D76657273696F6E terminal=? res=success' >type=CRED_REFR msg=audit(1538044638.809:17245): pid=4550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044638.834:17246): pid=4550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044639.068:17247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044639.068:17248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044639.071:17249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044639.090:17250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044639.171:17251): pid=4550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044639.171:17252): pid=4550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044639.296:17253): pid=4562 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044639.297:17254): pid=4562 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044639.297:17255): pid=4562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044639.316:17256): pid=4562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044639.823:17257): pid=4512 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="mpfr-3.1.1-4.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044639.851:17258): pid=4562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044639.851:17259): pid=4562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044639.872:17260): pid=4512 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libmpc-1.0.1-3.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044640.000:17261): pid=4572 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044640.000:17262): pid=4572 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044640.001:17263): pid=4572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044640.020:17264): pid=4572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044640.444:17265): pid=4572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044640.444:17266): pid=4572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044640.577:17267): pid=4581 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044640.577:17268): pid=4581 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044640.577:17269): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044640.595:17270): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044640.935:17271): pid=4512 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="cpp-4.8.5-36.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044641.153:17272): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044641.153:17273): pid=4581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044641.311:17274): pid=4591 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044641.311:17275): pid=4591 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044641.312:17276): pid=4591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044641.330:17277): pid=4591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044641.880:17278): pid=4591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044641.880:17279): pid=4591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044642.012:17280): pid=4600 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044642.012:17281): pid=4600 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044642.012:17282): pid=4600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044642.024:17283): pid=4600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044642.050:17284): pid=4512 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="kernel-headers-3.10.0-954.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044642.495:17285): pid=4512 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="glibc-headers-2.17-260.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044642.575:17286): pid=4600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044642.575:17287): pid=4600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044642.700:17288): pid=4512 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="glibc-devel-2.17-260.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044642.826:17289): pid=4610 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044642.827:17290): pid=4610 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044642.827:17291): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044642.846:17292): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044643.428:17293): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044643.428:17294): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044643.583:17295): pid=4620 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044643.583:17296): pid=4620 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044643.584:17297): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044643.600:17298): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044644.163:17299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044644.163:17300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044644.164:17301): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044644.164:17302): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044644.165:17303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044644.190:17304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044644.309:17305): pid=4631 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044644.309:17306): pid=4631 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044644.310:17307): pid=4631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044644.330:17308): pid=4512 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="gcc-4.8.5-36.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044644.342:17309): pid=4631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044644.374:17310): pid=4512 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="libffi-devel-3.0.13-18.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044644.478:17311): pid=4512 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-devel-2.7.5-76.el7.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044644.829:17312): pid=4631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044644.829:17313): pid=4631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044644.848:17314): pid=4420 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044644.849:17315): pid=4420 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044644.856:17316): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044644.856:17317): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1538044644.991:17318): pid=4647 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044644.992:17319): pid=4647 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044644.992:17320): pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044645.012:17321): pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538044645.047:17322): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044645.047:17323): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044645.049:17324): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4652 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044645.073:17325): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044645.073:17326): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044645.117:17327): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044645.117:17328): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044645.118:17329): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4660 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044645.147:17330): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044645.147:17331): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044645.161:17332): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044645.162:17333): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044645.163:17334): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4672 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044645.215:17335): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044645.215:17336): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044645.228:17337): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044645.228:17338): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044645.230:17339): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4681 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044645.260:17340): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044645.260:17341): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044645.273:17342): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044645.273:17343): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044645.275:17344): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4692 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044645.315:17345): pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044645.315:17346): pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044645.332:17347): pid=4705 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044645.332:17348): pid=4705 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6D636E626F6B7864616D7777646E6665667A796F797576756E76727664766A3B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034343634352E30342D3233313631313230333137383937332F656173795F696E7374616C6C2E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034343634352E30342D3233313631313230333137383937332F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044645.333:17349): pid=4705 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044645.343:17350): pid=4705 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1538044645.717:17351): pid=4712 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044645.717:17352): pid=4712 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044645.718:17353): pid=4712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044645.743:17354): pid=4712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044646.270:17355): pid=4712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044646.271:17356): pid=4712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044646.403:17357): pid=4721 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044646.404:17358): pid=4721 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044646.404:17359): pid=4721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044646.420:17360): pid=4721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044646.903:17361): pid=4721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044646.903:17362): pid=4721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044647.059:17363): pid=4729 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044647.060:17364): pid=4729 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044647.060:17365): pid=4729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044647.080:17366): pid=4729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044647.496:17367): pid=4729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044647.497:17368): pid=4729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044647.619:17369): pid=4738 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044647.620:17370): pid=4738 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044647.620:17371): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044647.630:17372): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044647.840:17373): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044647.840:17374): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044649.317:17375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044649.317:17376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044649.318:17377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044649.341:17378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044654.567:17379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044654.567:17380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044654.571:17381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044654.581:17382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044655.860:17383): pid=4705 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044655.860:17384): pid=4705 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044655.867:17385): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044655.867:17386): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044656.533:17387): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044656.533:17388): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044656.537:17389): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4764 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044656.558:17390): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044656.558:17391): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044656.570:17392): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044656.570:17393): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044656.571:17394): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4773 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044656.599:17395): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044656.599:17396): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044656.614:17397): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044656.614:17398): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044656.615:17399): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4785 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044656.652:17400): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044656.652:17401): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044656.665:17402): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044656.665:17403): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044656.666:17404): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4792 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044656.692:17405): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044656.692:17406): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044656.709:17407): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044656.709:17408): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044656.711:17409): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4801 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044659.818:17410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044659.818:17411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044659.819:17412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044659.830:17413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044662.376:17414): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044662.376:17415): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044662.472:17416): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044662.473:17417): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044662.474:17418): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4835 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044662.498:17419): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044662.498:17420): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044662.510:17421): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044662.510:17422): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044662.511:17423): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4843 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044662.535:17424): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044662.535:17425): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044662.549:17426): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044662.549:17427): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044662.551:17428): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4855 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044662.583:17429): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044662.583:17430): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044662.594:17431): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044662.595:17432): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044662.596:17433): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4862 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044662.621:17434): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044662.621:17435): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044662.634:17436): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044662.634:17437): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044662.635:17438): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4871 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044662.691:17439): pid=4884 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044662.692:17440): pid=4884 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044662.692:17441): pid=4884 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044662.703:17442): pid=4884 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044662.955:17443): pid=4884 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044662.955:17444): pid=4884 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044662.960:17445): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044662.960:17446): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044663.060:17447): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044663.060:17448): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044663.062:17449): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4892 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044663.085:17450): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044663.086:17451): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044663.098:17452): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044663.098:17453): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044663.100:17454): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4900 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044663.128:17455): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044663.128:17456): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044663.143:17457): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044663.143:17458): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044663.144:17459): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4912 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044663.182:17460): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044663.182:17461): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044663.194:17462): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044663.194:17463): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044663.196:17464): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4919 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044663.222:17465): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044663.222:17466): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044663.234:17467): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044663.235:17468): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044663.236:17469): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4928 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044665.067:17470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044665.067:17471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044665.069:17472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044665.080:17473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044670.317:17474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044670.317:17475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044670.318:17476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044670.325:17477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044673.661:17478): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044673.661:17479): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044673.726:17480): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044673.726:17481): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044673.727:17482): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4977 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044673.750:17483): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044673.750:17484): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044673.761:17485): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044673.761:17486): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044673.762:17487): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4985 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044673.788:17488): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044673.788:17489): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044673.802:17490): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044673.802:17491): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044673.803:17492): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=4997 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044673.836:17493): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044673.836:17494): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044673.848:17495): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044673.848:17496): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044673.849:17497): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5005 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044673.868:17498): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044673.868:17499): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044673.882:17500): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044673.882:17501): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044673.883:17502): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5014 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044674.945:17503): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044674.945:17504): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044675.073:17505): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044675.074:17506): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044675.075:17507): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5039 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044675.094:17508): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044675.094:17509): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044675.105:17510): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044675.106:17511): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044675.107:17512): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5047 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044675.127:17513): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044675.128:17514): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044675.141:17515): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044675.141:17516): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044675.142:17517): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5059 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044675.172:17518): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044675.172:17519): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044675.184:17520): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044675.184:17521): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044675.185:17522): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5066 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044675.202:17523): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044675.202:17524): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044675.215:17525): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044675.215:17526): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044675.216:17527): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5075 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044675.567:17528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044675.567:17529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044675.569:17530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044675.575:17531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044680.817:17532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044680.817:17533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044680.819:17534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044680.828:17535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044681.064:17536): pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044681.065:17537): pid=5111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044681.066:17538): pid=5111 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=423 res=1 >type=USER_START msg=audit(1538044681.088:17539): pid=5111 uid=0 auid=163 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044681.088:17540): pid=5111 uid=0 auid=163 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1538044682.830:17541): pid=5111 uid=0 auid=163 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044682.833:17542): pid=5111 uid=0 auid=163 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538044686.068:17543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044686.068:17544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044686.071:17545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044686.086:17546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044691.317:17547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044691.317:17548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044691.319:17549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044691.328:17550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044696.556:17551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044696.556:17552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044696.558:17553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044696.566:17554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044701.567:17555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044701.567:17556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044701.569:17557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044701.581:17558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044703.966:17559): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044703.966:17560): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044704.061:17561): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044704.061:17562): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044704.065:17563): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5921 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044704.086:17564): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044704.086:17565): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044704.097:17566): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044704.097:17567): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044704.099:17568): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5929 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044704.120:17569): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044704.120:17570): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044704.133:17571): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044704.133:17572): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044704.135:17573): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5941 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044704.169:17574): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044704.169:17575): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044704.182:17576): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044704.182:17577): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044704.184:17578): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5948 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044704.205:17579): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044704.205:17580): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044704.223:17581): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044704.223:17582): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044704.224:17583): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5957 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044704.280:17584): pid=5970 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044704.281:17585): pid=5970 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044704.281:17586): pid=5970 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044704.293:17587): pid=5970 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044704.499:17588): pid=5970 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044704.499:17589): pid=5970 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044704.502:17590): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044704.502:17591): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044704.597:17592): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044704.597:17593): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044704.598:17594): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5980 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044704.619:17595): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044704.619:17596): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044704.630:17597): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044704.630:17598): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044704.633:17599): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=5988 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044704.657:17600): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044704.657:17601): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044704.671:17602): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044704.671:17603): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044704.672:17604): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6000 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044704.710:17605): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044704.710:17606): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044704.722:17607): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044704.722:17608): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044704.723:17609): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6007 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044704.749:17610): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044704.750:17611): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044704.763:17612): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044704.763:17613): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044704.765:17614): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6016 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044704.801:17615): pid=6029 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044704.801:17616): pid=6029 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6463636B7A7870656F716C6D706F7A6C73686C6C6D706E76666261796462693B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034343730342E362D3133383935373839333537333536332F636F6D6D616E642E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034343730342E362D3133383935373839333537333536332F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044704.802:17617): pid=6029 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044704.804:17618): pid=6029 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044704.942:17619): pid=6029 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044704.942:17620): pid=6029 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044704.946:17621): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044704.946:17622): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044705.197:17623): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044705.197:17624): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044705.199:17625): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6038 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044705.213:17626): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044705.214:17627): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044705.224:17628): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044705.225:17629): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044705.226:17630): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6046 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044705.254:17631): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044705.254:17632): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044705.268:17633): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044705.268:17634): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044705.270:17635): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6058 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044705.304:17636): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044705.304:17637): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044705.315:17638): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044705.315:17639): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044705.317:17640): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6065 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044705.339:17641): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044705.339:17642): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044705.352:17643): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044705.352:17644): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044705.354:17645): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6074 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044705.406:17646): pid=6087 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044705.406:17647): pid=6087 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044705.406:17648): pid=6087 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044705.410:17649): pid=6087 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=NETFILTER_CFG msg=audit(1538044705.706:17650): table=filter family=2 entries=33 >type=SYSCALL msg=audit(1538044705.706:17650): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f83070 items=0 ppid=6091 pid=6093 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="iptables" exe="/usr/sbin/xtables-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044705.706:17650): proctitle=2F7362696E2F69707461626C6573002D740066696C746572002D4100494E505554002D7000746370002D6A00414343455054002D6D00636F6D6D656E74002D2D636F6D6D656E7400496E6672617265643A20627A31343034373633 >type=USER_END msg=audit(1538044705.723:17651): pid=6087 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044705.723:17652): pid=6087 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044705.727:17653): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044705.727:17654): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044705.977:17655): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044705.977:17656): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044705.978:17657): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6097 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044706.001:17658): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044706.002:17659): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044706.013:17660): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044706.013:17661): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044706.014:17662): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6105 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044706.039:17663): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044706.039:17664): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044706.053:17665): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044706.053:17666): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044706.055:17667): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6117 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044706.089:17668): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044706.089:17669): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044706.101:17670): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044706.101:17671): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044706.103:17672): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6124 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044706.124:17673): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044706.124:17674): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044706.136:17675): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044706.136:17676): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044706.138:17677): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6133 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044706.817:17678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044706.817:17679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044706.819:17680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044706.831:17681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044710.374:17682): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044710.374:17683): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044710.641:17684): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044710.641:17685): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044710.643:17686): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6161 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044710.669:17687): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044710.669:17688): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044710.680:17689): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044710.681:17690): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044710.682:17691): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6169 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044710.713:17692): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044710.713:17693): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044710.725:17694): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044710.725:17695): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044710.727:17696): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6181 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044710.764:17697): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044710.764:17698): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044710.776:17699): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044710.776:17700): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044710.777:17701): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6188 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044710.803:17702): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044710.803:17703): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044710.817:17704): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044710.817:17705): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044710.818:17706): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6197 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044712.067:17707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044712.067:17708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044712.070:17709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044712.082:17710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044713.399:17711): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044713.399:17712): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044713.677:17713): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044713.677:17714): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044713.679:17715): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6223 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044713.700:17716): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044713.700:17717): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044713.710:17718): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044713.710:17719): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044713.711:17720): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6231 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044713.737:17721): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044713.738:17722): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044713.752:17723): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044713.752:17724): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044713.753:17725): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6243 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044713.800:17726): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044713.800:17727): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044713.812:17728): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044713.812:17729): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044713.813:17730): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6250 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044713.832:17731): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044713.832:17732): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044713.843:17733): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044713.843:17734): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044713.845:17735): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6259 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044713.897:17736): pid=6272 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044713.897:17737): pid=6272 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044713.897:17738): pid=6272 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044713.904:17739): pid=6272 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044714.121:17740): pid=6272 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044714.122:17741): pid=6272 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044714.126:17742): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044714.126:17743): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1538044716.038:17744): pid=6287 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044716.039:17745): pid=6287 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044716.039:17746): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044716.065:17747): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044716.625:17748): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044716.625:17749): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044716.789:17750): pid=6296 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044716.789:17751): pid=6296 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044716.789:17752): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044716.808:17753): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044717.318:17754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044717.318:17755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044717.320:17756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044717.336:17757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044717.352:17758): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044717.352:17759): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044717.526:17760): pid=6307 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044717.527:17761): pid=6307 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044717.527:17762): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044717.546:17763): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044718.088:17764): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044718.088:17765): pid=6307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538044718.218:17766): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044718.218:17767): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044718.222:17768): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6318 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044718.248:17769): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044718.248:17770): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044718.261:17771): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044718.261:17772): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044718.263:17773): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6326 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044718.263:17774): pid=6316 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044718.263:17775): pid=6316 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044718.263:17776): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044718.282:17777): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044718.290:17778): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044718.291:17779): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044718.304:17780): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044718.304:17781): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044718.306:17782): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6339 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044718.350:17783): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044718.350:17784): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044718.362:17785): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044718.362:17786): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044718.364:17787): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6346 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044718.385:17788): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044718.385:17789): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044718.400:17790): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044718.400:17791): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044718.404:17792): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6355 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044718.631:17793): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044718.631:17794): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044722.567:17795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044722.567:17796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044722.570:17797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044722.589:17798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044725.391:17799): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044725.391:17800): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044725.734:17801): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044725.734:17802): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044725.736:17803): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6733 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044725.760:17804): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044725.761:17805): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044725.773:17806): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044725.773:17807): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044725.774:17808): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6741 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044725.799:17809): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044725.799:17810): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044725.810:17811): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044725.810:17812): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044725.811:17813): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6749 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044725.840:17814): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044725.840:17815): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044725.946:17816): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044725.946:17817): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044725.948:17818): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6761 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044725.985:17819): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044725.985:17820): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044725.996:17821): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044725.996:17822): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044725.997:17823): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6768 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044726.022:17824): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044726.022:17825): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044726.037:17826): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044726.037:17827): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044726.040:17828): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6777 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044726.456:17829): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044726.456:17830): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044726.698:17831): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044726.698:17832): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044726.700:17833): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6794 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044726.732:17834): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044726.732:17835): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044726.743:17836): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044726.743:17837): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044726.744:17838): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6801 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044726.771:17839): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044726.771:17840): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044726.907:17841): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044726.907:17842): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044726.909:17843): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6810 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044726.946:17844): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044726.946:17845): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044726.958:17846): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044726.958:17847): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044726.960:17848): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6817 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044726.985:17849): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044726.985:17850): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044726.996:17851): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044726.996:17852): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044726.998:17853): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6826 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044727.357:17854): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044727.357:17855): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538044727.817:17856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044727.818:17857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044727.820:17858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044727.836:17859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_LOGIN msg=audit(1538044728.339:17860): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044728.339:17861): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044728.340:17862): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6847 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044728.626:17863): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044728.626:17864): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044728.639:17865): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044728.639:17866): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044728.641:17867): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6855 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044728.665:17868): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044728.665:17869): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044728.680:17870): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044728.680:17871): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044728.681:17872): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6867 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044728.716:17873): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044728.716:17874): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044728.727:17875): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044728.727:17876): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044728.729:17877): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6874 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044728.748:17878): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044728.748:17879): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044728.761:17880): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044728.762:17881): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044728.763:17882): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6883 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044728.811:17883): pid=6896 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044728.812:17884): pid=6896 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044728.812:17885): pid=6896 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044728.822:17886): pid=6896 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538044733.068:17887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044733.068:17888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044733.070:17889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044733.083:17890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SOFTWARE_UPDATE msg=audit(1538044733.452:17891): pid=6908 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-subunit-1.2.0-16.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044733.951:17892): pid=6908 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-future-0.16.0-4.el7ost.1.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044734.041:17893): pid=6908 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-stestr-1.1.0-1.el7ost.1.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044734.142:17894): pid=6908 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-os-testr-1.0.0-0.20171024144108.7dd678e.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044735.240:17895): pid=6908 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-tempest-1:18.0.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044735.267:17896): pid=6908 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python2-tempestconf-1.1.5-0.20180326143753.f9d956f.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SOFTWARE_UPDATE msg=audit(1538044735.282:17897): pid=6908 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="openstack-tempest-1:18.0.0-2.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044735.650:17898): pid=6896 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044735.651:17899): pid=6896 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044735.655:17900): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044735.655:17901): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044735.948:17902): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044735.948:17903): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044735.949:17904): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6930 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044735.973:17905): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044735.973:17906): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044735.984:17907): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044735.984:17908): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044735.985:17909): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6938 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044736.012:17910): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044736.012:17911): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044736.026:17912): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044736.026:17913): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044736.027:17914): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6950 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044736.063:17915): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044736.063:17916): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044736.075:17917): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044736.075:17918): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044736.076:17919): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6957 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044736.099:17920): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044736.099:17921): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044736.115:17922): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044736.115:17923): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044736.116:17924): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6966 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044736.166:17925): pid=6979 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044736.166:17926): pid=6979 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044736.167:17927): pid=6979 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044736.172:17928): pid=6979 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044736.484:17929): pid=6979 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044736.484:17930): pid=6979 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044736.487:17931): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044736.487:17932): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044736.573:17933): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044736.573:17934): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044736.575:17935): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6988 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044736.597:17936): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044736.597:17937): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044736.608:17938): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044736.608:17939): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044736.609:17940): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=6996 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044736.632:17941): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044736.632:17942): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044736.646:17943): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044736.646:17944): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044736.647:17945): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7008 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044736.678:17946): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044736.679:17947): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044736.690:17948): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044736.690:17949): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044736.691:17950): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7015 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044736.715:17951): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044736.715:17952): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044736.730:17953): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044736.730:17954): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044736.731:17955): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7024 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044736.782:17956): pid=7037 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044736.783:17957): pid=7037 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786372616A716C617375697A746E73626B6E6978637377706A6B716F747274763B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034343733362E35372D3237373037383037333230333635372F636F6D6D616E642E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034343733362E35372D3237373037383037333230333635372F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044736.783:17958): pid=7037 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044736.787:17959): pid=7037 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044737.033:17960): pid=7037 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044737.034:17961): pid=7037 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044737.038:17962): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044737.038:17963): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044737.554:17964): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044737.555:17965): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044737.556:17966): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7046 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044737.580:17967): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044737.580:17968): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044737.592:17969): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044737.592:17970): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044737.593:17971): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7054 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044737.622:17972): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044737.622:17973): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044737.636:17974): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044737.636:17975): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044737.638:17976): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7066 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044737.673:17977): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044737.674:17978): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044737.687:17979): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044737.687:17980): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044737.688:17981): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7073 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044737.709:17982): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044737.709:17983): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044737.720:17984): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044737.720:17985): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044737.721:17986): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7082 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044737.765:17987): pid=7095 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044737.765:17988): pid=7095 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044737.765:17989): pid=7095 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044737.769:17990): pid=7095 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538044738.317:17991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044738.317:17992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044738.319:17993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044738.334:17994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044741.852:17995): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044741.853:17996): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044741.854:17997): pid=7117 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=424 res=1 >type=USER_START msg=audit(1538044741.888:17998): pid=7117 uid=0 auid=163 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044741.889:17999): pid=7117 uid=0 auid=163 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SOFTWARE_UPDATE msg=audit(1538044743.504:18000): pid=7111 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="python-junitxml-0.7-4.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044743.567:18001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044743.567:18002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044743.570:18003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044743.584:18004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044743.711:18005): pid=7095 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044743.712:18006): pid=7095 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044743.717:18007): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044743.717:18008): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044743.797:18009): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044743.797:18010): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044743.798:18011): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7140 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044743.825:18012): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044743.825:18013): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044743.836:18014): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044743.836:18015): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044743.837:18016): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7148 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044743.861:18017): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044743.861:18018): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044743.875:18019): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044743.876:18020): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044743.877:18021): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7160 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044743.909:18022): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044743.909:18023): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044743.921:18024): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044743.921:18025): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044743.922:18026): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7167 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044743.943:18027): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044743.943:18028): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044743.955:18029): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044743.956:18030): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044743.957:18031): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7176 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044744.011:18032): pid=7189 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044744.012:18033): pid=7189 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044744.012:18034): pid=7189 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044744.022:18035): pid=7189 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044744.418:18036): pid=7117 uid=0 auid=163 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044744.424:18037): pid=7117 uid=0 auid=163 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SOFTWARE_UPDATE msg=audit(1538044748.099:18038): pid=7207 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="subunit-filters-1.2.0-16.el7ost.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="yum" exe="/usr/bin/python2.7" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044748.316:18039): pid=7189 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044748.317:18040): pid=7189 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044748.320:18041): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044748.320:18042): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044748.807:18043): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044748.807:18044): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044748.808:18045): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7218 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044748.817:18046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044748.817:18047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044748.819:18048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044748.834:18049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044748.834:18050): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044748.834:18051): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044748.845:18052): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044748.845:18053): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044748.846:18054): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7230 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044748.869:18055): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044748.869:18056): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044748.882:18057): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044748.883:18058): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044748.884:18059): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7242 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044748.911:18060): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044748.911:18061): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044748.922:18062): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044748.922:18063): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044748.924:18064): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7249 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044748.945:18065): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044748.946:18066): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044748.960:18067): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044748.960:18068): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044748.962:18069): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7258 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044749.194:18070): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044749.194:18071): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044749.290:18072): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044749.290:18073): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044749.292:18074): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7275 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044749.307:18075): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044749.307:18076): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044749.317:18077): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044749.318:18078): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044749.318:18079): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7283 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044749.339:18080): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044749.339:18081): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044749.352:18082): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044749.352:18083): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044749.353:18084): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7295 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044749.385:18085): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044749.385:18086): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044749.398:18087): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044749.398:18088): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044749.399:18089): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7302 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044749.419:18090): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044749.419:18091): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044749.432:18092): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044749.432:18093): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044749.433:18094): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7311 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044749.665:18095): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044749.665:18096): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044749.777:18097): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044749.777:18098): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044749.779:18099): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7329 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044749.800:18100): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044749.800:18101): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044749.812:18102): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044749.812:18103): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044749.813:18104): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7337 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044749.836:18105): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044749.836:18106): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044749.850:18107): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044749.850:18108): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044749.851:18109): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7355 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044749.885:18110): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044749.885:18111): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044749.896:18112): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044749.896:18113): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044749.898:18114): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7362 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044749.917:18115): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044749.917:18116): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044749.930:18117): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044749.930:18118): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044749.931:18119): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7371 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044749.966:18120): pid=7384 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538044749.966:18121): pid=7384 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538044749.966:18122): pid=7384 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044749.970:18123): pid=7384 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044751.627:18124): pid=7384 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538044751.627:18125): pid=7384 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538044751.630:18126): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044751.630:18127): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044751.715:18128): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044751.715:18129): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044751.717:18130): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7399 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044751.733:18131): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044751.734:18132): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044751.744:18133): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044751.744:18134): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044751.745:18135): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7407 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044751.764:18136): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044751.764:18137): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044751.778:18138): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044751.778:18139): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044751.778:18140): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7419 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044751.806:18141): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044751.806:18142): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044751.818:18143): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044751.818:18144): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044751.819:18145): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7426 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044751.836:18146): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044751.836:18147): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044751.852:18148): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044751.852:18149): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044751.854:18150): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7435 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044754.068:18151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044754.068:18152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044754.070:18153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044754.081:18154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044754.247:18155): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044754.248:18156): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044754.327:18157): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044754.327:18158): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044754.328:18159): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7468 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044754.351:18160): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044754.351:18161): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044754.362:18162): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044754.362:18163): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044754.363:18164): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7476 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044754.388:18165): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044754.388:18166): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044754.402:18167): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044754.402:18168): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044754.403:18169): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7488 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044754.436:18170): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044754.436:18171): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044754.448:18172): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044754.448:18173): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044754.449:18174): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7495 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044754.467:18175): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044754.467:18176): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044754.480:18177): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044754.480:18178): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044754.481:18179): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7504 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044754.721:18180): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044754.721:18181): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044754.938:18182): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044754.939:18183): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044754.940:18184): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7526 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044754.958:18185): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044754.958:18186): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044754.969:18187): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044754.969:18188): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044754.970:18189): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7534 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044754.996:18190): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044754.996:18191): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044755.010:18192): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044755.010:18193): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044755.010:18194): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7546 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044755.046:18195): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044755.046:18196): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044755.058:18197): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044755.058:18198): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044755.059:18199): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7553 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044755.077:18200): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044755.077:18201): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044755.089:18202): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044755.090:18203): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044755.092:18204): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7562 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044755.248:18205): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044755.248:18206): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044755.355:18207): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044755.355:18208): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044755.356:18209): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7579 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044755.378:18210): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044755.378:18211): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044755.390:18212): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044755.390:18213): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044755.391:18214): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7587 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044755.412:18215): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044755.412:18216): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044755.426:18217): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044755.426:18218): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044755.427:18219): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7599 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044755.456:18220): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044755.456:18221): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044755.469:18222): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044755.469:18223): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044755.471:18224): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7606 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044755.488:18225): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044755.488:18226): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044755.501:18227): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044755.501:18228): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044755.502:18229): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7615 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044759.144:18230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044759.144:18231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044759.147:18232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044759.161:18233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044764.222:18234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044764.222:18235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044764.224:18236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044764.234:18237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044769.318:18238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044769.318:18239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044769.319:18240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044769.330:18241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044774.567:18242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044774.567:18243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044774.570:18244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044774.580:18245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044776.003:18246): pid=7789 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044776.004:18247): pid=7789 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044776.004:18248): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044776.037:18249): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044776.625:18250): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044776.625:18251): pid=7789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044776.794:18252): pid=7806 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044776.795:18253): pid=7806 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044776.795:18254): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044776.808:18255): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044777.047:18256): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044777.047:18257): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044777.211:18258): pid=7819 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044777.212:18259): pid=7819 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044777.212:18260): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044777.233:18261): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044777.816:18262): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044777.816:18263): pid=7819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044777.989:18264): pid=7827 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044777.989:18265): pid=7827 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044777.989:18266): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044778.010:18267): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044778.318:18268): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044778.318:18269): pid=7827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044779.817:18270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044779.818:18271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044779.819:18272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044779.840:18273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044779.938:18274): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044779.938:18275): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044780.025:18276): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044780.026:18277): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044780.027:18278): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7845 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044780.054:18279): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044780.054:18280): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044780.064:18281): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044780.064:18282): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044780.066:18283): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7853 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044780.093:18284): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044780.093:18285): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044780.106:18286): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044780.106:18287): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044780.107:18288): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7865 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044780.143:18289): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044780.143:18290): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044780.154:18291): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044780.154:18292): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044780.156:18293): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7872 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044780.180:18294): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044780.180:18295): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044780.197:18296): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044780.197:18297): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044780.199:18298): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7881 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044785.068:18299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044785.068:18300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044785.071:18301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044785.088:18302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044790.317:18303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044790.317:18304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044790.318:18305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044790.328:18306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044792.274:18307): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044792.274:18308): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044793.061:18309): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044793.061:18310): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044793.063:18311): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7929 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044793.085:18312): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044793.085:18313): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044793.096:18314): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044793.097:18315): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044793.097:18316): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7937 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044793.124:18317): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044793.124:18318): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044793.140:18319): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044793.140:18320): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044793.141:18321): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7949 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044793.175:18322): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044793.175:18323): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044793.188:18324): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044793.188:18325): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044793.190:18326): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7956 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044793.209:18327): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044793.209:18328): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044793.227:18329): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044793.227:18330): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044793.230:18331): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7965 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044793.601:18332): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044793.601:18333): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044793.726:18334): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044793.726:18335): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044793.727:18336): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7982 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044793.745:18337): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044793.746:18338): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044793.756:18339): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044793.756:18340): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044793.757:18341): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=7990 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044793.778:18342): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044793.779:18343): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044793.792:18344): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044793.792:18345): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044793.794:18346): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8002 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044793.829:18347): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044793.829:18348): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044793.840:18349): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044793.841:18350): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044793.842:18351): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8009 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044793.868:18352): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044793.868:18353): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044793.880:18354): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044793.881:18355): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044793.882:18356): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8018 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044794.119:18357): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044794.120:18358): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044794.182:18359): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044794.183:18360): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044794.184:18361): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8036 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044794.203:18362): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044794.203:18363): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044794.216:18364): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044794.216:18365): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044794.217:18366): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8044 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044794.244:18367): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044794.244:18368): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044794.258:18369): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044794.258:18370): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044794.259:18371): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8056 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044794.291:18372): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044794.291:18373): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044794.302:18374): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044794.302:18375): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044794.303:18376): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8063 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044794.325:18377): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044794.325:18378): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044794.337:18379): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044794.337:18380): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044794.338:18381): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8072 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044794.682:18382): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044794.682:18383): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044794.743:18384): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044794.744:18385): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044794.745:18386): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8091 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044794.767:18387): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044794.767:18388): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044794.778:18389): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044794.778:18390): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044794.779:18391): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8099 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044794.807:18392): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044794.807:18393): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044794.821:18394): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044794.821:18395): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044794.822:18396): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8111 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044794.849:18397): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044794.850:18398): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044794.863:18399): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044794.863:18400): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044794.864:18401): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8118 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044794.888:18402): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044794.888:18403): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044794.900:18404): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044794.900:18405): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044794.902:18406): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8127 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044795.147:18407): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044795.147:18408): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044795.210:18409): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044795.210:18410): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044795.211:18411): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8144 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044795.227:18412): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044795.227:18413): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044795.240:18414): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044795.241:18415): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044795.242:18416): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8152 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044795.268:18417): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044795.268:18418): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044795.282:18419): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044795.282:18420): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044795.283:18421): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8164 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044795.310:18422): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044795.310:18423): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044795.323:18424): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044795.323:18425): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044795.324:18426): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8172 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044795.345:18427): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044795.345:18428): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044795.357:18429): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044795.357:18430): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044795.358:18431): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8181 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044795.568:18432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044795.568:18433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044795.571:18434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044795.581:18435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044795.590:18436): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044795.590:18437): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044795.868:18438): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044795.868:18439): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044795.870:18440): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8201 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044795.892:18441): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044795.893:18442): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044795.905:18443): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044795.905:18444): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044795.906:18445): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8209 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044795.932:18446): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044795.932:18447): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044795.947:18448): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044795.947:18449): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044795.948:18450): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8221 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044795.981:18451): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044795.981:18452): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044795.993:18453): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044795.993:18454): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044795.994:18455): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8228 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044796.017:18456): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044796.017:18457): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044796.031:18458): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044796.031:18459): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044796.032:18460): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8237 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044796.306:18461): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044796.306:18462): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044796.376:18463): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044796.376:18464): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044796.377:18465): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8254 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044796.395:18466): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044796.395:18467): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044796.406:18468): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044796.407:18469): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044796.408:18470): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8262 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044796.429:18471): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044796.429:18472): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044796.443:18473): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044796.443:18474): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044796.445:18475): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8274 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044796.474:18476): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044796.474:18477): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044796.485:18478): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044796.485:18479): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044796.486:18480): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8281 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044796.512:18481): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044796.513:18482): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044796.524:18483): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044796.524:18484): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044796.526:18485): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8290 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044796.935:18486): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044796.936:18487): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044797.001:18488): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044797.001:18489): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044797.003:18490): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8308 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044797.023:18491): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044797.023:18492): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044797.034:18493): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044797.034:18494): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044797.036:18495): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8316 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044797.064:18496): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044797.065:18497): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044797.079:18498): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044797.079:18499): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044797.080:18500): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8328 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044797.119:18501): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044797.119:18502): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044797.132:18503): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044797.132:18504): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044797.133:18505): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8335 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044797.159:18506): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044797.159:18507): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044797.171:18508): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044797.171:18509): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044797.172:18510): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8344 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044797.576:18511): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044797.576:18512): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044797.642:18513): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044797.642:18514): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044797.644:18515): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8361 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044797.668:18516): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044797.668:18517): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044797.679:18518): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044797.679:18519): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044797.680:18520): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8369 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044797.708:18521): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044797.708:18522): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044797.722:18523): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044797.722:18524): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044797.724:18525): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8381 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044797.761:18526): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044797.761:18527): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044797.772:18528): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044797.772:18529): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044797.773:18530): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8388 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044797.799:18531): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044797.799:18532): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044797.811:18533): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044797.811:18534): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044797.813:18535): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8397 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044798.231:18536): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044798.231:18537): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044798.461:18538): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044798.462:18539): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044798.463:18540): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8415 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044798.488:18541): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044798.488:18542): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044798.500:18543): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044798.500:18544): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044798.501:18545): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8423 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044798.528:18546): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044798.528:18547): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044798.542:18548): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044798.542:18549): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044798.544:18550): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8435 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044798.580:18551): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044798.581:18552): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044798.593:18553): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044798.593:18554): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044798.594:18555): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8442 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044798.620:18556): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044798.620:18557): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044798.633:18558): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044798.633:18559): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044798.635:18560): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8451 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044798.931:18561): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044798.931:18562): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044799.104:18563): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044799.104:18564): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044799.106:18565): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8469 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044799.132:18566): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044799.132:18567): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044799.143:18568): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044799.143:18569): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044799.144:18570): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8477 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044799.173:18571): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044799.173:18572): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044799.187:18573): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044799.187:18574): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044799.188:18575): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8489 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044799.225:18576): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044799.225:18577): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044799.239:18578): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044799.239:18579): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044799.240:18580): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8496 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044799.264:18581): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044799.264:18582): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044799.276:18583): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044799.276:18584): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044799.278:18585): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8505 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044799.568:18586): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044799.569:18587): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044799.815:18588): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044799.815:18589): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044799.817:18590): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8524 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044799.838:18591): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044799.838:18592): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044799.850:18593): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044799.850:18594): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044799.852:18595): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8532 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044799.878:18596): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044799.878:18597): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044799.892:18598): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044799.892:18599): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044799.894:18600): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8544 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044799.931:18601): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044799.931:18602): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044799.943:18603): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044799.944:18604): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044799.945:18605): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8551 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044799.969:18606): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044799.969:18607): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044799.982:18608): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044799.982:18609): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044799.984:18610): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8560 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044800.817:18611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044800.817:18612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044800.819:18613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044800.826:18614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044800.838:18615): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538044800.838:18616): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538044801.032:18617): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044801.032:18618): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044801.034:18619): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8584 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044801.050:18620): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044801.050:18621): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044801.064:18622): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044801.064:18623): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044801.066:18624): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8592 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044801.087:18625): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044801.088:18626): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044801.103:18627): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044801.103:18628): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044801.104:18629): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8604 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044801.137:18630): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044801.137:18631): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044801.148:18632): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538044801.148:18633): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538044801.150:18634): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8611 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044801.170:18635): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538044801.171:18636): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538044801.183:18637): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538044801.183:18638): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538044801.184:18639): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=8620 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044801.446:18640): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044801.446:18641): pid=8635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044801.447:18642): pid=8635 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=425 res=1 >type=USER_START msg=audit(1538044801.497:18643): pid=8635 uid=0 auid=163 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044801.498:18644): pid=8635 uid=0 auid=163 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1538044804.749:18645): pid=8635 uid=0 auid=163 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044804.753:18646): pid=8635 uid=0 auid=163 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538044806.067:18647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044806.067:18648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044806.068:18649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044806.083:18650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044811.318:18651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044811.318:18652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044811.320:18653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044811.335:18654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044816.567:18655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044816.567:18656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044816.569:18657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044816.575:18658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044817.295:18659): pid=8752 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044817.296:18660): pid=8752 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_REFR msg=audit(1538044817.296:18661): pid=8752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1538044817.335:18662): avc: denied { read } for pid=8752 comm="sudo" name="utmp" dev="tmpfs" ino=9809 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1 >type=AVC msg=audit(1538044817.335:18662): avc: denied { open } for pid=8752 comm="sudo" path="/run/utmp" dev="tmpfs" ino=9809 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1 >type=SYSCALL msg=audit(1538044817.335:18662): arch=c000003e syscall=2 success=yes exit=6 a0=7f2919b7e9c8 a1=80000 a2=7f2919b7e9b9 a3=7ffff4fe0d60 items=0 ppid=31935 pid=8752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044817.335:18662): proctitle=7375646F006E657574726F6E2D726F6F7477726170002F6574632F6E657574726F6E2F726F6F74777261702E636F6E6600707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65 >type=AVC msg=audit(1538044817.335:18663): avc: denied { lock } for pid=8752 comm="sudo" path="/run/utmp" dev="tmpfs" ino=9809 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1 >type=SYSCALL msg=audit(1538044817.335:18663): arch=c000003e syscall=72 success=yes exit=0 a0=6 a1=7 a2=7ffff4fe1140 a3=8 items=0 ppid=31935 pid=8752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044817.335:18663): proctitle=7375646F006E657574726F6E2D726F6F7477726170002F6574632F6E657574726F6E2F726F6F74777261702E636F6E6600707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65 >type=USER_START msg=audit(1538044817.335:18664): pid=8752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044818.450:18665): pid=8764 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044818.450:18666): pid=8764 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66202D2D636F6E6669672D66696C65202F6574632F6E657574726F6E2F646863705F6167656E742E696E69202D2D636F6E6669672D646972202F6574632F6E657574726F6E2F636F6E662E642F6E657574726F6E2D646863702D6167656E74202D2D707269767365705F636F6E74657874206E657574726F6E2E70726976696C656765642E64656661756C74202D2D707269767365705F736F636B5F70617468202F746D702F746D7043454C3274372F707269767365702E736F636B terminal=? res=success' >type=CRED_REFR msg=audit(1538044818.451:18667): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044818.497:18668): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044818.685:18669): pid=8767 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044818.685:18670): pid=8767 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_REFR msg=audit(1538044818.685:18671): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044818.739:18672): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044819.222:18673): pid=8752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044819.222:18674): pid=8752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044819.304:18675): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044819.304:18675): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044819.304:18675): table=raw family=2 entries=0 >type=SYSCALL msg=audit(1538044819.304:18675): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f6112535578 a2=0 a3=7ffcef76b190 items=0 ppid=8778 pid=8787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044819.304:18675): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=USER_ACCT msg=audit(1538044819.338:18676): pid=8790 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044819.338:18677): pid=8790 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F74777261702D6461656D6F6E202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66 terminal=? res=success' >type=CRED_REFR msg=audit(1538044819.339:18678): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044819.350:18679): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044819.695:18680): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044819.695:18681): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044819.816:18682): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044819.816:18682): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044819.816:18682): table=raw family=2 entries=0 >type=SYSCALL msg=audit(1538044819.816:18682): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f89f9bd4578 a2=0 a3=7ffcc1ddd4d0 items=0 ppid=8806 pid=8816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044819.816:18682): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=NETFILTER_CFG msg=audit(1538044820.088:18683): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044820.088:18683): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044820.088:18683): table=raw family=2 entries=0 >type=SYSCALL msg=audit(1538044820.088:18683): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=8832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044820.088:18683): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=USER_ACCT msg=audit(1538044820.136:18684): pid=8834 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044820.137:18685): pid=8834 uid=996 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='cwd="/" cmd=6E657574726F6E2D726F6F74777261702D6461656D6F6E202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66 terminal=? res=success' >type=CRED_REFR msg=audit(1538044820.137:18686): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044820.161:18687): pid=8834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044820.225:18688): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044820.225:18689): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:neutron_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044820.402:18690): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044820.402:18690): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044820.402:18690): table=raw family=2 entries=0 >type=ANOM_PROMISCUOUS msg=audit(1538044820.387:18691): dev=tap4836e55c-96 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044820.387:18691): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044820.387:18691): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=SYSCALL msg=audit(1538044820.402:18690): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f36cd592578 a2=0 a3=7ffdecffd9b0 items=0 ppid=8830 pid=8875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044820.402:18690): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538044820.418:18692): dev=tap83c8eaa2-43 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044820.418:18692): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044820.418:18692): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538044820.604:18693): table=filter family=2 entries=34 >type=SYSCALL msg=audit(1538044820.604:18693): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1bc0cf0 items=0 ppid=470 pid=8925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044820.604:18693): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044820.612:18694): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044820.612:18694): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1bbd660 items=0 ppid=470 pid=8925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044820.612:18694): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044820.654:18695): table=filter family=10 entries=11 >type=SYSCALL msg=audit(1538044820.654:18695): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1eda0c0 items=0 ppid=470 pid=8933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044820.654:18695): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044820.657:18696): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044820.657:18696): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044820.657:18696): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044820.657:18696): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044820.657:18696): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044820.657:18696): table=raw family=10 entries=0 >type=SYSCALL msg=audit(1538044820.657:18696): arch=c000003e syscall=175 success=yes exit=0 a0=1e40260 a1=1a49 a2=41a94e a3=1e3d000 items=0 ppid=8936 pid=8937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044820.657:18696): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F726177 >type=NETFILTER_CFG msg=audit(1538044820.659:18697): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538044820.659:18697): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1ed5010 items=0 ppid=470 pid=8933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044820.659:18697): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044821.081:18698): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538044821.081:18698): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=124b640 items=0 ppid=8795 pid=8986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.081:18698): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044821.086:18699): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044821.086:18699): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044821.086:18699): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044821.086:18699): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044821.086:18699): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044821.086:18699): table=mangle family=2 entries=0 >type=SYSCALL msg=audit(1538044821.086:18699): arch=c000003e syscall=175 success=yes exit=0 a0=11bb210 a1=1c81 a2=41a94e a3=11b7500 items=0 ppid=8987 pid=8988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.086:18699): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6D616E676C65 >type=NETFILTER_CFG msg=audit(1538044821.091:18700): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538044821.091:18700): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=124dd20 items=0 ppid=8795 pid=8986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.091:18700): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044821.103:18701): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044821.103:18701): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044821.103:18701): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044821.103:18701): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044821.103:18701): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044821.103:18701): table=nat family=2 entries=0 >type=SYSCALL msg=audit(1538044821.103:18701): arch=c000003e syscall=175 success=yes exit=0 a0=12d19d0 a1=20f9 a2=41a94e a3=12cd500 items=0 ppid=8992 pid=8993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.103:18701): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D0069707461626C655F6E6174 >type=NETFILTER_CFG msg=audit(1538044821.107:18702): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538044821.107:18702): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=124e700 items=0 ppid=8795 pid=8986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.107:18702): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044821.107:18703): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044821.107:18703): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=124dd20 items=0 ppid=8795 pid=8986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.107:18703): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538044821.115:18704): dev=tap9f77220b-78 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044821.115:18704): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.115:18704): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538044821.319:18705): dev=qg-525bddfe-b4 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044821.319:18705): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.319:18705): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538044821.382:18706): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538044821.382:18706): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=25c4640 items=0 ppid=8795 pid=9014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.382:18706): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044821.383:18707): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538044821.383:18707): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=25c6d20 items=0 ppid=8795 pid=9014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.383:18707): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044821.384:18708): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538044821.384:18708): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=25c7700 items=0 ppid=8795 pid=9014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.384:18708): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044821.384:18709): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044821.384:18709): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=25c6d20 items=0 ppid=8795 pid=9014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.384:18709): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538044821.819:18710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044821.819:18711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044821.845:18712): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538044821.845:18712): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a68640 items=0 ppid=8795 pid=9063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.845:18712): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044821.847:18713): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538044821.847:18713): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a6ad20 items=0 ppid=8795 pid=9063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.847:18713): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538044821.848:18714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044821.848:18715): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538044821.848:18715): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a6b700 items=0 ppid=8795 pid=9063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.848:18715): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044821.848:18716): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044821.848:18716): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a6ad20 items=0 ppid=8795 pid=9063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044821.848:18716): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_STOP msg=audit(1538044821.857:18717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538044822.044:18718): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538044822.044:18718): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=118a7b0 items=0 ppid=8841 pid=9077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.044:18718): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044822.071:18719): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538044822.071:18719): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=118c8a0 items=0 ppid=8841 pid=9077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.071:18719): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044822.073:18720): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538044822.073:18720): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=118df60 items=0 ppid=8841 pid=9077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.073:18720): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044822.094:18721): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044822.094:18721): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=118d6b0 items=0 ppid=8841 pid=9077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.094:18721): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044822.158:18722): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538044822.158:18722): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=7c7ad0 items=0 ppid=8841 pid=9096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.158:18722): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044822.170:18723): table=mangle family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044822.170:18723): table=mangle family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044822.170:18723): table=mangle family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044822.170:18723): table=mangle family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044822.170:18723): table=mangle family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044822.170:18723): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538044822.170:18723): arch=c000003e syscall=175 success=yes exit=0 a0=131e260 a1=1da1 a2=41a94e a3=131b000 items=0 ppid=9098 pid=9099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.170:18723): proctitle=2F7362696E2F6D6F6470726F6265002D71002D2D006970367461626C655F6D616E676C65 >type=NETFILTER_CFG msg=audit(1538044822.173:18724): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538044822.173:18724): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=7c8c50 items=0 ppid=8841 pid=9096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.173:18724): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044822.173:18725): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538044822.173:18725): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=7c8c50 items=0 ppid=8841 pid=9096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.173:18725): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044822.352:18726): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538044822.352:18726): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=18b1a60 items=0 ppid=8841 pid=9110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.352:18726): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044822.651:18727): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538044822.651:18727): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a58ba0 items=0 ppid=8841 pid=9118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.651:18727): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044822.651:18728): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538044822.651:18728): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a5aaf0 items=0 ppid=8841 pid=9118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.651:18728): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044822.659:18729): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1538044822.659:18729): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a5aaf0 items=0 ppid=8841 pid=9118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.659:18729): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044822.908:18730): table=filter family=2 entries=60 >type=SYSCALL msg=audit(1538044822.908:18730): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=185bc30 items=0 ppid=470 pid=9128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.908:18730): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044822.989:18731): table=filter family=10 entries=37 >type=SYSCALL msg=audit(1538044822.989:18731): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=81b510 items=0 ppid=470 pid=9132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044822.989:18731): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044823.144:18732): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044823.144:18732): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044823.144:18732): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044823.144:18732): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044823.144:18732): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044823.144:18732): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044823.144:18732): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538044823.144:18732): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=9137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044823.144:18732): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=NETFILTER_CFG msg=audit(1538044823.194:18733): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044823.194:18733): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044823.194:18733): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044823.194:18733): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044823.194:18733): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044823.194:18733): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044823.194:18733): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538044823.194:18733): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=9142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044823.194:18733): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538044824.146:18734): dev=qg-77ce9001-e2 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044824.146:18734): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044824.146:18734): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538044824.253:18735): dev=qg-4ca23e49-64 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044824.253:18735): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044824.253:18735): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538044824.771:18736): table=filter family=2 entries=64 >type=SYSCALL msg=audit(1538044824.771:18736): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9ace70 items=0 ppid=470 pid=9246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044824.771:18736): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044824.825:18737): table=filter family=10 entries=41 >type=SYSCALL msg=audit(1538044824.825:18737): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1b478f0 items=0 ppid=470 pid=9250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044824.825:18737): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.392:18738): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538044825.392:18738): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9aa7b0 items=0 ppid=8841 pid=9277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.392:18738): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.393:18739): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538044825.393:18739): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9ac8a0 items=0 ppid=8841 pid=9277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.393:18739): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.395:18740): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538044825.395:18740): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9adf60 items=0 ppid=8841 pid=9277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.395:18740): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.395:18741): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044825.395:18741): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9ad6b0 items=0 ppid=8841 pid=9277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.395:18741): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.424:18742): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538044825.424:18742): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=be77b0 items=0 ppid=8841 pid=9278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.424:18742): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.425:18743): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538044825.425:18743): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=be98a0 items=0 ppid=8841 pid=9278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.425:18743): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.425:18744): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538044825.425:18744): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=beaf60 items=0 ppid=8841 pid=9278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.425:18744): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.425:18745): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044825.425:18745): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bea6b0 items=0 ppid=8841 pid=9278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.425:18745): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.533:18746): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538044825.533:18746): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=19b3ad0 items=0 ppid=8841 pid=9281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.533:18746): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.533:18747): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538044825.533:18747): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=19b4c50 items=0 ppid=8841 pid=9281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.533:18747): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.533:18748): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538044825.533:18748): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=19b4c50 items=0 ppid=8841 pid=9281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.533:18748): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.575:18749): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538044825.575:18749): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1726ad0 items=0 ppid=8841 pid=9282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.575:18749): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.575:18750): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538044825.575:18750): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1727c50 items=0 ppid=8841 pid=9282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.575:18750): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.576:18751): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538044825.576:18751): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1727c50 items=0 ppid=8841 pid=9282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.576:18751): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.724:18752): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538044825.724:18752): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9bea60 items=0 ppid=8841 pid=9287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.724:18752): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.744:18753): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538044825.744:18753): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a97a60 items=0 ppid=8841 pid=9288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.744:18753): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.892:18754): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538044825.892:18754): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a76ba0 items=0 ppid=8841 pid=9293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.892:18754): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.893:18755): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538044825.893:18755): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a78af0 items=0 ppid=8841 pid=9293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.893:18755): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.893:18756): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1538044825.893:18756): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a78af0 items=0 ppid=8841 pid=9293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.893:18756): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.929:18757): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538044825.929:18757): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=11eaba0 items=0 ppid=8841 pid=9294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.929:18757): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.929:18758): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538044825.929:18758): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=11ecaf0 items=0 ppid=8841 pid=9294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.929:18758): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044825.930:18759): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1538044825.930:18759): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=11ecaf0 items=0 ppid=8841 pid=9294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044825.930:18759): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538044827.068:18760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044827.069:18761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044827.073:18762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044827.104:18763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538044827.282:18764): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044827.282:18764): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044827.282:18764): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044827.282:18764): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044827.282:18764): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044827.282:18764): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044827.282:18764): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538044827.282:18764): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=9314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044827.282:18764): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538044827.704:18765): dev=qg-f42e642e-91 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044827.704:18765): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044827.704:18765): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538044828.273:18766): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538044828.273:18766): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=cfd7b0 items=0 ppid=8841 pid=9376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.273:18766): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044828.274:18767): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538044828.274:18767): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=cff8a0 items=0 ppid=8841 pid=9376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.274:18767): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044828.274:18768): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538044828.274:18768): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d00f60 items=0 ppid=8841 pid=9376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.274:18768): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044828.274:18769): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044828.274:18769): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d006b0 items=0 ppid=8841 pid=9376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.274:18769): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044828.317:18770): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538044828.317:18770): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=21aead0 items=0 ppid=8841 pid=9378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.317:18770): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044828.318:18771): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538044828.318:18771): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=21afc50 items=0 ppid=8841 pid=9378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.318:18771): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044828.318:18772): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538044828.318:18772): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=21afc50 items=0 ppid=8841 pid=9378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.318:18772): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044828.408:18773): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538044828.408:18773): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=22e0a60 items=0 ppid=8841 pid=9382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.408:18773): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044828.448:18774): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044828.448:18774): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044828.448:18774): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044828.448:18774): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044828.448:18774): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044828.448:18774): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044828.448:18774): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538044828.448:18774): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f36cd592578 a2=0 a3=7ffdecffd9b0 items=0 ppid=8830 pid=9385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.448:18774): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=NETFILTER_CFG msg=audit(1538044828.473:18775): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538044828.473:18775): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b74ba0 items=0 ppid=8841 pid=9387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.473:18775): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044828.473:18776): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538044828.473:18776): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b76af0 items=0 ppid=8841 pid=9387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.473:18776): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044828.473:18777): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1538044828.473:18777): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b76af0 items=0 ppid=8841 pid=9387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.473:18777): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538044828.715:18778): dev=tap91ff1553-c2 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044828.715:18778): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.715:18778): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538044828.904:18779): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538044828.904:18779): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=24b3640 items=0 ppid=8795 pid=9428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.904:18779): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044828.906:18780): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538044828.906:18780): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=24b5d20 items=0 ppid=8795 pid=9428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.906:18780): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044828.906:18781): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538044828.906:18781): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=24b6700 items=0 ppid=8795 pid=9428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.906:18781): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044828.906:18782): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044828.906:18782): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=24b5d20 items=0 ppid=8795 pid=9428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044828.906:18782): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044829.165:18783): table=filter family=2 entries=68 >type=SYSCALL msg=audit(1538044829.165:18783): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=17870b0 items=0 ppid=470 pid=9436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044829.165:18783): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044829.206:18784): table=filter family=10 entries=45 >type=SYSCALL msg=audit(1538044829.206:18784): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=8d1cd0 items=0 ppid=470 pid=9439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044829.206:18784): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538044831.273:18785): dev=qr-afb8ece0-5b prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044831.273:18785): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044831.273:18785): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538044831.768:18786): dev=qr-5fcd110c-30 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044831.768:18786): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044831.768:18786): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=SERVICE_START msg=audit(1538044832.321:18787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044832.321:18788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044832.326:18789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044832.375:18790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538044833.463:18791): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538044833.463:18791): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=fb9050 items=0 ppid=8841 pid=9617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044833.463:18791): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044833.819:18792): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538044833.819:18792): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7973e0 items=0 ppid=8841 pid=9628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044833.819:18792): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044833.819:18793): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538044833.819:18793): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=798980 items=0 ppid=8841 pid=9628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044833.819:18793): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044833.832:18794): table=filter family=2 entries=72 >type=SYSCALL msg=audit(1538044833.832:18794): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9d82f0 items=0 ppid=470 pid=9630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044833.832:18794): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044833.879:18795): table=filter family=10 entries=49 >type=SYSCALL msg=audit(1538044833.879:18795): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=b950b0 items=0 ppid=470 pid=9635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044833.879:18795): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044834.024:18796): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044834.024:18796): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044834.024:18796): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044834.024:18796): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044834.024:18796): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044834.024:18796): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044834.024:18796): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538044834.024:18796): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f36cd592578 a2=0 a3=7ffdecffd9b0 items=0 ppid=8830 pid=9640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044834.024:18796): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538044834.319:18797): dev=tapa50da0c2-97 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044834.319:18797): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044834.319:18797): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538044834.497:18798): dev=qr-c8546bde-63 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044834.497:18798): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044834.497:18798): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538044834.565:18799): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538044834.565:18799): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2025050 items=0 ppid=8841 pid=9709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044834.565:18799): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044834.590:18800): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538044834.590:18800): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1283640 items=0 ppid=8795 pid=9734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044834.590:18800): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044834.592:18801): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538044834.592:18801): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1285d20 items=0 ppid=8795 pid=9734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044834.592:18801): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044834.593:18802): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538044834.593:18802): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1286700 items=0 ppid=8795 pid=9734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044834.593:18802): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044834.593:18803): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044834.593:18803): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1285d20 items=0 ppid=8795 pid=9734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044834.593:18803): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044834.804:18804): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538044834.804:18804): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=b3f3e0 items=0 ppid=8841 pid=9756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044834.804:18804): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044834.804:18805): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538044834.804:18805): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=b40980 items=0 ppid=8841 pid=9756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044834.804:18805): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538044835.654:18806): dev=qr-e34e014e-df prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044835.654:18806): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044835.654:18806): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_ACCT msg=audit(1538044836.136:18807): pid=9823 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044836.136:18808): pid=9823 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044836.137:18809): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044836.224:18810): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044836.770:18811): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538044836.770:18811): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1bf5050 items=0 ppid=8841 pid=9847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044836.770:18811): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538044836.843:18812): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044836.843:18813): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044837.061:18814): pid=9852 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044837.062:18815): pid=9852 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044837.062:18816): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044837.109:18817): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044837.249:18818): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538044837.249:18818): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7d13e0 items=0 ppid=8841 pid=9863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044837.249:18818): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044837.250:18819): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538044837.250:18819): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7d2980 items=0 ppid=8841 pid=9863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044837.250:18819): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538044837.568:18820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044837.568:18821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044837.571:18822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044837.631:18823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538044837.809:18824): table=filter family=2 entries=76 >type=SYSCALL msg=audit(1538044837.809:18824): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=106da10 items=0 ppid=470 pid=9881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044837.809:18824): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044837.836:18825): table=filter family=10 entries=53 >type=SYSCALL msg=audit(1538044837.836:18825): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=24a89d0 items=0 ppid=470 pid=9883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044837.836:18825): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538044837.860:18826): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044837.860:18827): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044838.135:18828): pid=9889 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044838.136:18829): pid=9889 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044838.136:18830): pid=9889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044838.199:18831): pid=9889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044838.372:18832): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538044838.372:18832): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9d0050 items=0 ppid=8841 pid=9906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044838.372:18832): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538044838.517:18833): pid=9889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044838.517:18834): pid=9889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044838.706:18835): pid=9918 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044838.706:18836): pid=9918 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044838.707:18837): pid=9918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044838.748:18838): pid=9918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044839.090:18839): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538044839.090:18839): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=c833e0 items=0 ppid=8841 pid=9927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044839.090:18839): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044839.090:18840): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538044839.090:18840): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=c84980 items=0 ppid=8841 pid=9927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044839.090:18840): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538044839.364:18841): pid=9918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044839.365:18842): pid=9918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044839.389:18843): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044839.389:18843): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044839.389:18843): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044839.389:18843): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044839.389:18843): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044839.389:18843): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044839.389:18843): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538044839.389:18843): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=9940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044839.389:18843): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538044839.773:18844): dev=qg-1a8ba803-74 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044839.773:18844): arch=c000003e syscall=46 success=yes exit=76 a0=12 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044839.773:18844): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538044840.086:18845): table=filter family=2 entries=82 >type=SYSCALL msg=audit(1538044840.086:18845): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1c9dbb0 items=0 ppid=470 pid=9990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044840.086:18845): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044840.138:18846): table=filter family=10 entries=59 >type=SYSCALL msg=audit(1538044840.138:18846): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1da1d20 items=0 ppid=470 pid=9994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044840.138:18846): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044840.535:18847): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538044840.535:18847): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a707b0 items=0 ppid=8841 pid=10020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044840.535:18847): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044840.536:18848): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538044840.536:18848): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a728a0 items=0 ppid=8841 pid=10020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044840.536:18848): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044840.537:18849): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538044840.537:18849): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a73f60 items=0 ppid=8841 pid=10020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044840.537:18849): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044840.537:18850): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044840.537:18850): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a736b0 items=0 ppid=8841 pid=10020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044840.537:18850): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044840.640:18851): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538044840.640:18851): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=148dad0 items=0 ppid=8841 pid=10024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044840.640:18851): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044840.640:18852): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538044840.640:18852): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=148ec50 items=0 ppid=8841 pid=10024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044840.640:18852): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044840.641:18853): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538044840.641:18853): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=148ec50 items=0 ppid=8841 pid=10024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044840.641:18853): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044840.726:18854): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538044840.726:18854): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1736a60 items=0 ppid=8841 pid=10028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044840.726:18854): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044840.821:18855): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538044840.821:18855): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=256eba0 items=0 ppid=8841 pid=10032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044840.821:18855): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044840.822:18856): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538044840.822:18856): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2570af0 items=0 ppid=8841 pid=10032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044840.822:18856): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044840.822:18857): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1538044840.822:18857): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2570af0 items=0 ppid=8841 pid=10032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044840.822:18857): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538044842.828:18858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044842.828:18859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044842.831:18860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044842.870:18861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044846.376:18862): pid=10129 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="nova" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044846.378:18863): pid=10129 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F7573722F73686172652F6E6F76612F6E6F76612D646973742E636F6E66202D2D636F6E6669672D66696C65202F6574632F6E6F76612F6E6F76612E636F6E66202D2D707269767365705F636F6E74657874206E6F76612E707269767365702E7379735F61646D696E5F7063747874202D2D707269767365705F736F636B5F70617468202F746D702F746D70513258694F642F707269767365702E736F636B terminal=? res=success' >type=CRED_REFR msg=audit(1538044846.379:18864): pid=10129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044846.417:18865): pid=10130 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="nova" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044846.417:18866): pid=10130 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F7573722F73686172652F6E6F76612F6E6F76612D646973742E636F6E66202D2D636F6E6669672D66696C65202F6574632F6E6F76612F6E6F76612E636F6E66202D2D707269767365705F636F6E74657874206E6F76612E707269767365702E7379735F61646D696E5F7063747874202D2D707269767365705F736F636B5F70617468202F746D702F746D705A4E654A65622F707269767365702E736F636B terminal=? res=success' >type=USER_START msg=audit(1538044846.417:18867): pid=10129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538044846.417:18868): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044846.464:18869): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044846.538:18870): pid=10136 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="nova" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044846.538:18871): pid=10136 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F7573722F73686172652F6E6F76612F6E6F76612D646973742E636F6E66202D2D636F6E6669672D66696C65202F6574632F6E6F76612F6E6F76612E636F6E66202D2D707269767365705F636F6E74657874206E6F76612E707269767365702E7379735F61646D696E5F7063747874202D2D707269767365705F736F636B5F70617468202F746D702F746D7039305A78595A2F707269767365702E736F636B terminal=? res=success' >type=CRED_REFR msg=audit(1538044846.540:18872): pid=10136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044846.613:18873): pid=10136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044846.604:18874): dev=qr-d6ab863a-8d prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044846.604:18874): arch=c000003e syscall=46 success=yes exit=76 a0=12 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044846.604:18874): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538044847.845:18875): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538044847.845:18875): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1d69050 items=0 ppid=8841 pid=10233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044847.845:18875): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044848.019:18876): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538044848.019:18876): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10ad3e0 items=0 ppid=8841 pid=10245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044848.019:18876): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044848.020:18877): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538044848.020:18877): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10ae980 items=0 ppid=8841 pid=10245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044848.020:18877): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538044848.073:18878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044848.073:18879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044848.076:18880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044848.136:18881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538044848.374:18882): table=filter family=2 entries=84 >type=SYSCALL msg=audit(1538044848.374:18882): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=181c4d0 items=0 ppid=470 pid=10264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044848.374:18882): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044848.440:18883): table=filter family=10 entries=61 >type=SYSCALL msg=audit(1538044848.440:18883): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2298710 items=0 ppid=470 pid=10266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044848.440:18883): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538044848.647:18884): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044848.647:18885): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044848.737:18886): pid=10136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044848.737:18887): pid=10136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044848.763:18888): pid=10129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044848.763:18889): pid=10129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044848.986:18890): pid=10272 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044848.987:18891): pid=10272 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76637265617465202D54202D56203167202D6E20766F6C756D652D39343834363336312D323533612D346234632D613765612D3631336264663364393562312063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044848.987:18892): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044849.038:18893): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044849.634:18894): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044849.634:18895): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044851.077:18896): pid=10388 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="nova" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044851.079:18897): pid=10388 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F7573722F73686172652F6E6F76612F6E6F76612D646973742E636F6E66202D2D636F6E6669672D66696C65202F6574632F6E6F76612F6E6F76612E636F6E66202D2D707269767365705F636F6E74657874207669665F706C75675F6F76732E707269767365702E7669665F706C7567202D2D707269767365705F736F636B5F70617468202F746D702F746D704346317130762F707269767365702E736F636B terminal=? res=success' >type=CRED_REFR msg=audit(1538044851.079:18898): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044851.114:18899): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044852.937:18900): pid=10424 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="nova" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044852.937:18901): pid=10424 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F7573722F73686172652F6E6F76612F6E6F76612D646973742E636F6E66202D2D636F6E6669672D66696C65202F6574632F6E6F76612F6E6F76612E636F6E66202D2D707269767365705F636F6E74657874207669665F706C75675F6F76732E707269767365702E7669665F706C7567202D2D707269767365705F736F636B5F70617468202F746D702F746D70774F324D77762F707269767365702E736F636B terminal=? res=success' >type=CRED_REFR msg=audit(1538044852.938:18902): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044852.992:18903): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044853.184:18904): pid=10432 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="nova" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044853.184:18905): pid=10432 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F7573722F73686172652F6E6F76612F6E6F76612D646973742E636F6E66202D2D636F6E6669672D66696C65202F6574632F6E6F76612F6E6F76612E636F6E66202D2D707269767365705F636F6E74657874207669665F706C75675F6F76732E707269767365702E7669665F706C7567202D2D707269767365705F736F636B5F70617468202F746D702F746D704262423450742F707269767365702E736F636B terminal=? res=success' >type=CRED_REFR msg=audit(1538044853.185:18906): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044853.203:18907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044853.203:18908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044853.205:18909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044853.226:18910): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044853.246:18911): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044853.247:18912): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044853.261:18913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538044853.570:18914): dev=qvb9a593e02-a9 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044853.570:18914): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffce0362bc0 a2=0 a3=7ffce03625e0 items=0 ppid=10431 pid=10480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044853.570:18914): proctitle=6970006C696E6B007365740071766239613539336530322D61390070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538044853.605:18915): dev=qvo9a593e02-a9 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044853.605:18915): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffd28bb0810 a2=0 a3=7ffd28bb0220 items=0 ppid=10431 pid=10485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044853.605:18915): proctitle=6970006C696E6B007365740071766F39613539336530322D61390070726F6D697363006F6E >type=SERVICE_START msg=audit(1538044853.827:18916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044854.194:18917): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea vm-ctx=system_u:system_r:svirt_t:s0:c758,c834 img-ctx=system_u:object_r:svirt_image_t:s0:c758,c834 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044854.195:18918): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044854.225:18919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=virtlogd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044854.297:18920): dev=tap9a593e02-a9 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044854.297:18920): arch=c000003e syscall=16 success=yes exit=0 a0=52 a1=89a2 a2=7f20e5c81f60 a3=53202d2030613a65 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044854.297:18920): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538044854.307:18921): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea net=fa:16:3e:8f:6e:a0 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.337:18922): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea net=fa:16:3e:8f:6e:a0 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.411:18923): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000002.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.411:18924): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000002.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.411:18925): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000002.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.411:18926): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000002.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.411:18927): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000002.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.411:18928): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000002.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.411:18929): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000002.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.411:18930): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000002.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.411:18931): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000002.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.411:18932): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000002.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.411:18933): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000002.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.610:18934): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea old-disk="?" new-disk="/var/lib/nova/instances/111b05cc-4878-4120-adbc-a71d02a3e1ea/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.610:18935): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea old-net="?" new-net="fa:16:3e:8f:6e:a0" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.610:18936): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea old-chardev="?" new-chardev="/dev/pts/1" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.610:18937): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044854.610:18938): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538044854.610:18939): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea vm-pid=10591 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044854.772:18940): table=filter family=2 entries=86 >type=SYSCALL msg=audit(1538044854.772:18940): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=100e240 items=0 ppid=470 pid=10654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044854.772:18940): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044854.788:18941): table=raw family=2 entries=9 >type=SYSCALL msg=audit(1538044854.788:18941): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ff5010 items=0 ppid=470 pid=10654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044854.788:18941): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044854.886:18942): table=filter family=10 entries=63 >type=SYSCALL msg=audit(1538044854.886:18942): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1a62420 items=0 ppid=470 pid=10668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044854.886:18942): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044854.886:18943): table=raw family=10 entries=9 >type=SYSCALL msg=audit(1538044854.886:18943): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1a4dac0 items=0 ppid=470 pid=10668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044854.886:18943): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538044854.946:18944): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044854.946:18945): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044855.222:18946): dev=qvb32317632-e7 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044855.222:18946): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffee300e560 a2=0 a3=7ffee300dfa0 items=0 ppid=10669 pid=10703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044855.222:18946): proctitle=6970006C696E6B007365740071766233323331373633322D65370070726F6D697363006F6E >type=USER_END msg=audit(1538044855.226:18947): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044855.227:18948): pid=10424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044855.263:18949): dev=qvo32317632-e7 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044855.263:18949): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffeabd4bc50 a2=0 a3=7ffeabd4b660 items=0 ppid=10669 pid=10711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044855.263:18949): proctitle=6970006C696E6B007365740071766F33323331373633322D65370070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538044855.494:18950): dev=qvb7a77f693-47 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044855.494:18950): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7fffb453e260 a2=0 a3=7fffb453dca0 items=0 ppid=10687 pid=10758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044855.494:18950): proctitle=6970006C696E6B007365740071766237613737663639332D34370070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538044855.531:18951): dev=qvo7a77f693-47 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044855.531:18951): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffe6a8cc010 a2=0 a3=7ffe6a8cba20 items=0 ppid=10687 pid=10773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044855.531:18951): proctitle=6970006C696E6B007365740071766F37613737663639332D34370070726F6D697363006F6E >type=VIRT_MACHINE_ID msg=audit(1538044856.102:18952): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d vm-ctx=system_u:system_r:svirt_t:s0:c135,c614 img-ctx=system_u:object_r:svirt_image_t:s0:c135,c614 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044856.102:18953): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044856.104:18954): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf vm-ctx=system_u:system_r:svirt_t:s0:c441,c628 img-ctx=system_u:object_r:svirt_image_t:s0:c441,c628 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044856.104:18955): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044856.121:18956): dev=tap7a77f693-47 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044856.121:18956): arch=c000003e syscall=16 success=yes exit=0 a0=59 a1=89a2 a2=7f20e5480f60 a3=53202d2061373a64 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044856.121:18956): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538044856.156:18957): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf net=fa:16:3e:55:fd:7a path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044856.152:18958): dev=tap32317632-e7 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044856.152:18958): arch=c000003e syscall=16 success=yes exit=0 a0=5a a1=89a2 a2=7f20e5c81f60 a3=53202d2034633a30 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044856.152:18958): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538044856.174:18959): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d net=fa:16:3e:48:e0:c4 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.175:18960): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d net=fa:16:3e:48:e0:c4 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.182:18961): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf net=fa:16:3e:55:fd:7a path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.262:18962): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000001.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.262:18963): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000001.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.263:18964): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000001.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.263:18965): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000001.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.263:18966): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000001.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.263:18967): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000001.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.263:18968): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000001.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.263:18969): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000001.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.263:18970): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000001.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.263:18971): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000001.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.263:18972): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d2\x2dinstance\x2d00000001.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.292:18973): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000003.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.292:18974): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000003.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.292:18975): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000003.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.292:18976): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000003.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.292:18977): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000003.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.293:18978): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000003.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.293:18979): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000003.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.293:18980): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000003.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.293:18981): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000003.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.293:18982): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000003.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.293:18983): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d3\x2dinstance\x2d00000003.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044856.622:18984): table=filter family=2 entries=113 >type=SYSCALL msg=audit(1538044856.622:18984): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=82e970 items=0 ppid=470 pid=10955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044856.622:18984): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044856.623:18985): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538044856.623:18985): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=80d010 items=0 ppid=470 pid=10955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044856.623:18985): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044856.701:18986): table=filter family=10 entries=91 >type=SYSCALL msg=audit(1538044856.701:18986): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1a6ff40 items=0 ppid=470 pid=10959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044856.701:18986): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044856.702:18987): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538044856.702:18987): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1a51010 items=0 ppid=470 pid=10959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044856.702:18987): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=VIRT_RESOURCE msg=audit(1538044856.725:18988): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf old-disk="?" new-disk="/var/lib/nova/instances/ef76ef0a-9e69-48ac-8d08-04849504fabf/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.725:18989): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf old-net="?" new-net="fa:16:3e:55:fd:7a" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.726:18990): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf old-chardev="?" new-chardev="/dev/pts/3" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.726:18991): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.726:18992): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538044856.726:18993): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf vm-pid=10878 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.837:18994): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d old-disk="?" new-disk="/var/lib/nova/instances/33ad5527-0233-4b0e-86e9-39f904876c8d/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.837:18995): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d old-net="?" new-net="fa:16:3e:48:e0:c4" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.837:18996): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d old-chardev="?" new-chardev="/dev/pts/2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.837:18997): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044856.837:18998): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538044856.837:18999): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d vm-pid=10874 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044858.323:19000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044858.323:19001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044858.327:19002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044858.376:19003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044861.817:19004): pid=11000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044861.817:19005): pid=11000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044861.819:19006): pid=11000 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=426 res=1 >type=USER_START msg=audit(1538044861.907:19007): pid=11000 uid=0 auid=163 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044861.908:19008): pid=11000 uid=0 auid=163 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1538044862.164:19009): pid=11006 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044862.166:19010): pid=11006 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76637265617465202D54202D56203167202D6E20766F6C756D652D34643333336432632D306432652D346438372D623163392D6461376538353438613237612063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044862.166:19011): pid=11006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044862.216:19012): pid=11006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044863.097:19013): pid=11006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044863.104:19014): pid=11006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044863.568:19015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044863.568:19016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044863.572:19017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044863.625:19018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRED_DISP msg=audit(1538044864.405:19019): pid=11000 uid=0 auid=163 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044864.425:19020): pid=11000 uid=0 auid=163 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1538044864.771:19021): pid=11051 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="nova" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044864.773:19022): pid=11051 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D636F6E6669672D66696C65202F7573722F73686172652F6E6F76612F6E6F76612D646973742E636F6E66202D2D636F6E6669672D66696C65202F6574632F6E6F76612F6E6F76612E636F6E66202D2D707269767365705F636F6E74657874206F735F627269636B2E70726976696C656765642E64656661756C74202D2D707269767365705F736F636B5F70617468202F746D702F746D7043657852746C2F707269767365702E736F636B terminal=? res=success' >type=CRED_REFR msg=audit(1538044864.773:19023): pid=11051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044864.803:19024): pid=11051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044866.415:19025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044866.537:19026): pid=11051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044866.538:19027): pid=11051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044867.422:19028): pid=11080 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044867.423:19029): pid=11080 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D4B2063696E6465722D766F6C756D65732F766F6C756D652D39343834363336312D323533612D346234632D613765612D363133626466336439356231 terminal=? res=success' >type=CRED_REFR msg=audit(1538044867.423:19030): pid=11080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044867.486:19031): pid=11080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044867.706:19032): pid=11086 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044867.706:19033): pid=11086 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D4B2063696E6465722D766F6C756D65732F766F6C756D652D34643333336432632D306432652D346438372D623163392D646137653835343861323761 terminal=? res=success' >type=CRED_REFR msg=audit(1538044867.706:19034): pid=11086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044867.741:19035): pid=11086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044867.861:19036): pid=11080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044867.861:19037): pid=11080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044868.044:19038): pid=11094 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044868.044:19039): pid=11094 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_REFR msg=audit(1538044868.044:19040): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044868.062:19041): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044868.329:19042): pid=11086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044868.329:19043): pid=11086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044868.817:19044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044868.817:19045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044868.820:19046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044868.857:19047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044869.108:19048): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044869.108:19049): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044869.281:19050): pid=11157 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044869.282:19051): pid=11157 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538044869.282:19052): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044869.339:19053): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044869.889:19054): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044869.889:19055): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044870.041:19056): pid=11174 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044870.042:19057): pid=11174 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538044870.042:19058): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044870.068:19059): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044870.921:19060): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044870.921:19061): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044871.069:19062): pid=11196 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044871.069:19063): pid=11196 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_REFR msg=audit(1538044871.069:19064): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044871.081:19065): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044872.386:19066): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044872.386:19067): pid=11196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044872.624:19068): pid=11214 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044872.624:19069): pid=11214 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538044872.624:19070): pid=11214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044872.725:19071): pid=11214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044872.981:19072): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538044872.981:19072): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1d09e50 items=0 ppid=8841 pid=11223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044872.981:19072): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538044873.633:19073): pid=11214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044873.633:19074): pid=11214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044873.847:19075): pid=11243 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044873.847:19076): pid=11243 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538044873.848:19077): pid=11243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044873.859:19078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044873.859:19079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044873.861:19080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044873.898:19081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538044873.902:19082): pid=11243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044874.559:19083): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538044874.559:19083): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=781e50 items=0 ppid=8841 pid=11264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044874.559:19083): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538044874.571:19084): pid=11243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044874.571:19085): pid=11243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044874.767:19086): pid=11268 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044874.768:19087): pid=11268 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206164642D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D39343834363336312D323533612D346234632D613765612D36313362646633643935623120767A674A336E7A7757595032566A5039457459562033515543443261516538426A524139542069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538044874.768:19088): pid=11268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044874.791:19089): pid=11268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044875.840:19090): pid=11268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044875.840:19091): pid=11268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044875.978:19092): pid=11296 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044875.978:19093): pid=11296 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538044875.979:19094): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044876.009:19095): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044877.007:19096): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044877.007:19097): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044877.184:19098): pid=11314 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044877.184:19099): pid=11314 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206164642D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D34643333336432632D306432652D346438372D623163392D6461376538353438613237612068354C70467243356974554E77764E52524578722047706B54784B777258354D53556648382069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538044877.184:19100): pid=11314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044877.285:19101): pid=11314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044878.666:19102): pid=11314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044878.666:19103): pid=11314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044878.876:19104): pid=11333 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044878.876:19105): pid=11333 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538044878.877:19106): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044878.962:19107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044878.962:19108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044878.964:19109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044878.965:19110): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044878.986:19111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044880.117:19112): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044880.117:19113): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044880.234:19114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044884.069:19115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044884.069:19116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044884.074:19117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044884.093:19118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538044889.318:19119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044889.318:19120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044889.320:19121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044889.345:19122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538044893.050:19123): dev=qvb393692d5-37 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044893.050:19123): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffd3a1ed590 a2=0 a3=7ffd3a1ecfa0 items=0 ppid=10687 pid=11879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044893.050:19123): proctitle=6970006C696E6B007365740071766233393336393264352D33370070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538044893.093:19124): dev=qvo393692d5-37 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044893.093:19124): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffe75ee63d0 a2=0 a3=7ffe75ee5de0 items=0 ppid=10687 pid=11891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044893.093:19124): proctitle=6970006C696E6B007365740071766F33393336393264352D33370070726F6D697363006F6E >type=SERVICE_START msg=audit(1538044893.275:19125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044893.672:19126): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 vm-ctx=system_u:system_r:svirt_t:s0:c91,c600 img-ctx=system_u:object_r:svirt_image_t:s0:c91,c600 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044893.673:19127): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044893.735:19128): dev=tap393692d5-37 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044893.735:19128): arch=c000003e syscall=16 success=yes exit=0 a0=53 a1=89a2 a2=7f20e447ef60 a3=53202d2039333a30 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044893.735:19128): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538044893.803:19129): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 net=fa:16:3e:0a:90:39 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044893.803:19130): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 net=fa:16:3e:0a:90:39 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044893.931:19131): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d4\x2dinstance\x2d00000004.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044893.931:19132): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d4\x2dinstance\x2d00000004.scope/" class=path path="/dev/disk/by-id/scsi-3600140508bc2a4604934386a5cd291a7" rdev=08:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044893.932:19133): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d4\x2dinstance\x2d00000004.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044893.932:19134): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d4\x2dinstance\x2d00000004.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044893.932:19135): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d4\x2dinstance\x2d00000004.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044893.933:19136): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d4\x2dinstance\x2d00000004.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044893.933:19137): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d4\x2dinstance\x2d00000004.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044893.933:19138): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d4\x2dinstance\x2d00000004.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044893.933:19139): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d4\x2dinstance\x2d00000004.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044893.933:19140): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d4\x2dinstance\x2d00000004.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044893.933:19141): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d4\x2dinstance\x2d00000004.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044893.934:19142): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d4\x2dinstance\x2d00000004.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044894.396:19143): table=filter family=2 entries=171 >type=SYSCALL msg=audit(1538044894.396:19143): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=263ea10 items=0 ppid=470 pid=12110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044894.396:19143): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044894.397:19144): table=raw family=2 entries=18 >type=SYSCALL msg=audit(1538044894.397:19144): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2616f00 items=0 ppid=470 pid=12110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044894.397:19144): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044894.451:19145): table=filter family=10 entries=147 >type=SYSCALL msg=audit(1538044894.451:19145): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1460110 items=0 ppid=470 pid=12116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044894.451:19145): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044894.451:19146): table=raw family=10 entries=18 >type=SYSCALL msg=audit(1538044894.451:19146): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=143abb0 items=0 ppid=470 pid=12116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044894.451:19146): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538044894.570:19147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044894.570:19148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044894.572:19149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044894.611:19150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044896.024:19151): pid=12143 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044896.025:19152): pid=12143 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044896.026:19153): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044896.066:19154): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044896.439:19155): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044896.439:19156): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044896.594:19157): pid=12153 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044896.595:19158): pid=12153 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044896.595:19159): pid=12153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044896.621:19160): pid=12153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044896.850:19161): pid=12153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044896.850:19162): pid=12153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044896.998:19163): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d1\x2dinstance\x2d00000002.scope/" class=path path="/dev/sdb" rdev=08:10 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044897.031:19164): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=attach vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea old-disk="?" new-disk="/dev/sdb" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044897.037:19165): pid=12162 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044897.038:19166): pid=12162 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044897.038:19167): pid=12162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044897.103:19168): pid=12162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044897.630:19169): pid=12162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044897.630:19170): pid=12162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044897.743:19171): pid=12181 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044897.743:19172): pid=12181 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044897.743:19173): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044897.778:19174): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044898.118:19175): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044898.118:19176): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044898.380:19177): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 old-disk="?" new-disk="/dev/disk/by-id/scsi-3600140508bc2a4604934386a5cd291a7" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044898.380:19178): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 old-net="?" new-net="fa:16:3e:0a:90:39" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044898.380:19179): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 old-chardev="?" new-chardev="/dev/pts/4" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044898.380:19180): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044898.380:19181): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538044898.380:19182): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 vm-pid=12028 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044899.819:19183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044899.819:19184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044899.822:19185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044899.858:19186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538044901.764:19187): dev=tap393692d5-37 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1538044902.124:19188): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000004" uuid=12cf6ff0-bad8-4a7a-bc77-ae70475230a5 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044903.824:19189): table=filter family=2 entries=198 >type=SYSCALL msg=audit(1538044903.824:19189): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=22e9ae0 items=0 ppid=470 pid=12301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044903.824:19189): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044903.824:19190): table=raw family=2 entries=21 >type=SYSCALL msg=audit(1538044903.824:19190): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=22c64d0 items=0 ppid=470 pid=12301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044903.824:19190): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044903.867:19191): table=filter family=10 entries=175 >type=SYSCALL msg=audit(1538044903.867:19191): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1fe84d0 items=0 ppid=470 pid=12307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044903.867:19191): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044903.868:19192): table=raw family=10 entries=21 >type=SYSCALL msg=audit(1538044903.868:19192): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1fc5cb0 items=0 ppid=470 pid=12307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044903.868:19192): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538044905.069:19193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044905.069:19194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044905.073:19195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044905.110:19196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044906.902:19197): pid=12324 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044906.903:19198): pid=12324 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D39343834363336312D323533612D346234632D613765612D3631336264663364393562312069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538044906.903:19199): pid=12324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044906.941:19200): pid=12324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044907.959:19201): pid=12324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044907.959:19202): pid=12324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044908.131:19203): pid=12343 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044908.131:19204): pid=12343 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538044908.132:19205): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044908.174:19206): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044908.508:19207): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538044908.508:19207): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=23e3e50 items=0 ppid=8841 pid=12351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044908.508:19207): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538044909.307:19208): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044909.307:19209): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044909.483:19210): pid=12373 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044909.483:19211): pid=12373 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538044909.484:19212): pid=12373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044909.497:19213): pid=12373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044910.318:19214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044910.318:19215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044910.319:19216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044910.348:19217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044910.558:19218): pid=12373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044910.558:19219): pid=12373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044910.738:19220): pid=12393 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044910.738:19221): pid=12393 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D39343834363336312D323533612D346234632D613765612D363133626466336439356231 terminal=? res=success' >type=CRED_REFR msg=audit(1538044910.739:19222): pid=12393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044910.767:19223): pid=12393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044911.839:19224): pid=12393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044911.839:19225): pid=12393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044911.974:19226): pid=12411 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044911.974:19227): pid=12411 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538044911.975:19228): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044912.006:19229): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044912.412:19230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044912.555:19231): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044912.556:19232): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044913.806:19233): table=filter family=2 entries=171 >type=SYSCALL msg=audit(1538044913.806:19233): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1638e60 items=0 ppid=470 pid=12442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044913.806:19233): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538044914.673:19234): pid=12447 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044914.674:19235): pid=12447 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538044914.674:19236): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044914.712:19237): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044915.567:19238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044915.567:19239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044915.570:19240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044915.587:19241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044915.609:19242): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044915.609:19243): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044915.720:19244): pid=12474 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044915.721:19245): pid=12474 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F766F6C756D652D39343834363336312D323533612D346234632D613765612D363133626466336439356231 terminal=? res=success' >type=CRED_REFR msg=audit(1538044915.721:19246): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044915.731:19247): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044916.290:19248): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044916.290:19249): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044916.445:19250): pid=12483 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044916.445:19251): pid=12483 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76646973706C6179202D2D6E6F68656164696E67202D43202D6F20417474722063696E6465722D766F6C756D65732F766F6C756D652D39343834363336312D323533612D346234632D613765612D363133626466336439356231 terminal=? res=success' >type=CRED_REFR msg=audit(1538044916.445:19252): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044916.458:19253): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044916.678:19254): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044916.678:19255): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044916.809:19256): pid=12492 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044916.809:19257): pid=12492 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C7672656D6F7665202D2D636F6E6669672061637469766174696F6E207B2072657472795F646561637469766174696F6E203D20317D20202D662063696E6465722D766F6C756D65732F766F6C756D652D39343834363336312D323533612D346234632D613765612D363133626466336439356231 terminal=? res=success' >type=CRED_REFR msg=audit(1538044916.809:19258): pid=12492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044916.831:19259): pid=12492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044917.222:19260): pid=12492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044917.222:19261): pid=12492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044917.547:19262): pid=12508 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044917.547:19263): pid=12508 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044917.547:19264): pid=12508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044917.559:19265): pid=12508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044917.818:19266): pid=12508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044917.818:19267): pid=12508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044917.937:19268): pid=12517 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044917.938:19269): pid=12517 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044917.938:19270): pid=12517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044917.996:19271): pid=12517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044918.533:19272): pid=12517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044918.533:19273): pid=12517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044918.640:19274): pid=12526 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044918.640:19275): pid=12526 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044918.641:19276): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044918.675:19277): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044918.919:19278): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044918.919:19279): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044919.024:19280): pid=12535 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044919.024:19281): pid=12535 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044919.025:19282): pid=12535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044919.052:19283): pid=12535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044919.290:19284): pid=12535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044919.290:19285): pid=12535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044920.819:19286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044920.819:19287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044920.821:19288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044920.851:19289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044921.451:19290): pid=12561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044921.451:19291): pid=12561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044921.452:19292): pid=12561 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=427 res=1 >type=USER_START msg=audit(1538044921.497:19293): pid=12561 uid=0 auid=163 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044921.498:19294): pid=12561 uid=0 auid=163 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1538044923.783:19295): pid=12582 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044923.784:19296): pid=12582 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D7045564C774B6466356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D terminal=? res=success' >type=CRED_REFR msg=audit(1538044923.784:19297): pid=12582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044923.808:19298): pid=12582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044923.878:19299): pid=12561 uid=0 auid=163 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044923.887:19300): pid=12561 uid=0 auid=163 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044924.062:19301): pid=12582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044924.062:19302): pid=12582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044924.308:19303): pid=12592 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044924.308:19304): pid=12592 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D7045564C774B6466356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D terminal=? res=success' >type=CRED_REFR msg=audit(1538044924.308:19305): pid=12592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044924.328:19306): pid=12592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044924.644:19307): pid=12592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044924.644:19308): pid=12592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044924.739:19309): pid=12604 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044924.739:19310): pid=12604 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76637265617465202D54202D56203167202D6E20766F6C756D652D30313736333032382D373263662D343737632D383636662D3538323837356231353261612063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044924.740:19311): pid=12604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044924.748:19312): pid=12604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044925.076:19313): pid=12604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044925.076:19314): pid=12604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044925.295:19315): pid=12624 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044925.295:19316): pid=12624 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D70686172735259 terminal=? res=success' >type=CRED_REFR msg=audit(1538044925.296:19317): pid=12624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044925.321:19318): pid=12624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044925.905:19319): pid=12624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044925.905:19320): pid=12624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044925.907:19321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044925.907:19322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044925.909:19323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044925.948:19324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044926.134:19325): pid=12638 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044926.135:19326): pid=12638 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D7045564C774B6466356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D terminal=? res=success' >type=CRED_REFR msg=audit(1538044926.135:19327): pid=12638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044926.157:19328): pid=12638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044926.439:19329): pid=12638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044926.439:19330): pid=12638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044926.586:19331): pid=12648 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044926.586:19332): pid=12648 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620646420636F756E743D302069663D2F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D7045564C774B6466356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D206F663D2F6465762F6D61707065722F63696E6465722D2D766F6C756D65732D766F6C756D652D2D30313736333032382D2D373263662D2D343737632D2D383636662D2D353832383735623135326161206F666C61673D646972656374 terminal=? res=success' >type=CRED_REFR msg=audit(1538044926.586:19333): pid=12648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044926.606:19334): pid=12648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044927.025:19335): pid=12648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044927.025:19336): pid=12648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044927.181:19337): pid=12658 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044927.181:19338): pid=12658 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662071656D752D696D6720636F6E76657274202D4F20726177202D74206E6F6E65202D662071636F7732202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D7045564C774B6466356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D202F6465762F6D61707065722F63696E6465722D2D766F6C756D65732D766F6C756D652D2D30313736333032382D2D373263662D2D343737632D2D383636662D2D353832383735623135326161 terminal=? res=success' >type=CRED_REFR msg=audit(1538044927.181:19339): pid=12658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044927.204:19340): pid=12658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044928.317:19341): pid=12658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044928.317:19342): pid=12658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044928.580:19343): pid=12672 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044928.580:19344): pid=12672 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D7045564C774B6466356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D terminal=? res=success' >type=CRED_REFR msg=audit(1538044928.580:19345): pid=12672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044928.603:19346): pid=12672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044929.182:19347): pid=12672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044929.182:19348): pid=12672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044931.067:19349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044931.067:19350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044931.069:19351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044931.107:19352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044936.036:19353): pid=12732 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044936.037:19354): pid=12732 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D4B2063696E6465722D766F6C756D65732F766F6C756D652D30313736333032382D373263662D343737632D383636662D353832383735623135326161 terminal=? res=success' >type=CRED_REFR msg=audit(1538044936.037:19355): pid=12732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044936.065:19356): pid=12732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044936.318:19357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044936.318:19358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044936.320:19359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044936.345:19360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044936.647:19361): pid=12732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044936.647:19362): pid=12732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044936.837:19363): dev=tap9a593e02-a9 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SERVICE_START msg=audit(1538044936.915:19364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044936.959:19365): pid=12752 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044936.960:19366): pid=12752 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_REFR msg=audit(1538044936.960:19367): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044936.978:19368): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538044937.113:19369): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=shutdown vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044937.167:19370): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044937.167:19370): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044937.167:19370): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044937.167:19370): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044937.167:19370): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044937.167:19370): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044937.167:19370): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538044937.167:19370): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f36cd592578 a2=0 a3=7ffdecffd9b0 items=0 ppid=8830 pid=12782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044937.167:19370): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538044937.368:19371): dev=tap29210c44-5a prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044937.368:19371): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044937.368:19371): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=VIRT_MACHINE_ID msg=audit(1538044937.566:19372): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea vm-ctx=system_u:system_r:svirt_t:s0:c311,c661 img-ctx=system_u:object_r:svirt_image_t:s0:c311,c661 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044937.566:19373): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044937.582:19374): dev=tap9a593e02-a9 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044937.582:19374): arch=c000003e syscall=16 success=yes exit=0 a0=53 a1=89a2 a2=7f20e5c81f60 a3=53202d2030613a65 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044937.582:19374): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538044937.660:19375): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea net=fa:16:3e:8f:6e:a0 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044937.660:19376): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea net=fa:16:3e:8f:6e:a0 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044937.701:19377): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538044937.701:19377): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f9f640 items=0 ppid=8795 pid=12846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044937.701:19377): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044937.703:19378): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538044937.703:19378): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1fa1d20 items=0 ppid=8795 pid=12846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044937.703:19378): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044937.703:19379): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538044937.703:19379): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1fa2700 items=0 ppid=8795 pid=12846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044937.703:19379): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044937.703:19380): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044937.703:19380): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1fa1d20 items=0 ppid=8795 pid=12846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044937.703:19380): proctitle=69707461626C65732D726573746F7265002D6E >type=VIRT_RESOURCE msg=audit(1538044937.742:19381): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044937.742:19382): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=path path="/dev/sdb" rdev=08:10 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044937.743:19383): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044937.743:19384): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044937.743:19385): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044937.743:19386): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044937.743:19387): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044937.744:19388): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044937.744:19389): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044937.744:19390): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044937.744:19391): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044937.744:19392): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044937.779:19393): table=filter family=2 entries=173 >type=SYSCALL msg=audit(1538044937.779:19393): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a07890 items=0 ppid=470 pid=12877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044937.779:19393): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044937.828:19394): table=filter family=10 entries=147 >type=SYSCALL msg=audit(1538044937.828:19394): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2387bb0 items=0 ppid=470 pid=12886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044937.828:19394): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=VIRT_RESOURCE msg=audit(1538044938.175:19395): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea old-disk="?" new-disk="/var/lib/nova/instances/111b05cc-4878-4120-adbc-a71d02a3e1ea/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044938.175:19396): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea old-disk="?" new-disk="/dev/sdb" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044938.175:19397): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea old-net="?" new-net="fa:16:3e:8f:6e:a0" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044938.175:19398): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea old-chardev="?" new-chardev="/dev/pts/1" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044938.175:19399): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044938.175:19400): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538044938.175:19401): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea vm-pid=12855 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044938.268:19402): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044938.269:19403): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044938.501:19404): pid=12912 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044938.501:19405): pid=12912 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538044938.502:19406): pid=12912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044938.555:19407): pid=12912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044939.373:19408): pid=12912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044939.373:19409): pid=12912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044939.583:19410): pid=12951 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044939.583:19411): pid=12951 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538044939.584:19412): pid=12951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044939.604:19413): pid=12951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044940.427:19414): pid=12951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044940.427:19415): pid=12951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044940.601:19416): pid=12978 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044940.601:19417): pid=12978 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206164642D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D30313736333032382D373263662D343737632D383636662D353832383735623135326161206D5534653272505A47694E6477473446785A4E3820665A344572576258744C336F78696F382069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538044940.602:19418): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044940.622:19419): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044940.789:19420): dev=qvbb0c89ed7-e7 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044940.789:19420): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffd97d50a20 a2=0 a3=7ffd97d50460 items=0 ppid=10687 pid=13014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044940.789:19420): proctitle=6970006C696E6B007365740071766262306338396564372D65370070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538044940.832:19421): dev=qvob0c89ed7-e7 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044940.832:19421): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7fffc218d8f0 a2=0 a3=7fffc218d320 items=0 ppid=10687 pid=13020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044940.832:19421): proctitle=6970006C696E6B007365740071766F62306338396564372D65370070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538044941.090:19422): dev=tapb0c89ed7-e7 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044941.090:19422): arch=c000003e syscall=16 success=yes exit=0 a0=4d a1=89a2 a2=7f20e4c80620 a3=53202d2066653a36 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044941.090:19422): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538044941.143:19423): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf net=fa:16:3e:00:06:ef path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044941.143:19424): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf net=fa:16:3e:00:06:ef path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044941.174:19425): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=attach vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf old-net="?" new-net="fa:16:3e:00:06:ef" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044941.569:19426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044941.569:19427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044941.573:19428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044941.623:19429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044941.784:19430): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044941.784:19431): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044941.960:19432): pid=13105 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044941.961:19433): pid=13105 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538044941.961:19434): pid=13105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044941.981:19435): table=filter family=2 entries=175 >type=SYSCALL msg=audit(1538044941.981:19435): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e41680 items=0 ppid=470 pid=13116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044941.981:19435): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044941.982:19436): table=raw family=2 entries=18 >type=SYSCALL msg=audit(1538044941.982:19436): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e18f00 items=0 ppid=470 pid=13116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044941.982:19436): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044942.002:19437): table=filter family=10 entries=149 >type=SYSCALL msg=audit(1538044942.002:19437): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=20f8b00 items=0 ppid=470 pid=13118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044942.002:19437): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044942.002:19438): table=raw family=10 entries=18 >type=SYSCALL msg=audit(1538044942.002:19438): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=20d2bb0 items=0 ppid=470 pid=13118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044942.002:19438): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_START msg=audit(1538044942.009:19439): pid=13105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044942.724:19440): pid=13105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044942.724:19441): pid=13105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044944.397:19442): dev=tapb0c89ed7-e7 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044944.397:19442): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a1 a2=7ffe7d5cddf9 a3=7ffe7d5ccea0 items=0 ppid=10687 pid=13210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044944.397:19442): proctitle=627263746C0064656C62720071627262306338396564372D6537 >type=VIRT_RESOURCE msg=audit(1538044944.745:19443): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=detach vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf old-net="fa:16:3e:00:06:ef" new-net="?" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044945.757:19444): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=mirror vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d old-disk="?" new-disk="/var/lib/nova/instances/snapshots/tmp9zvozO/71bb0a00788e4e90bbc9638844201034.delta" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044945.772:19445): table=filter family=2 entries=202 >type=SYSCALL msg=audit(1538044945.772:19445): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=16ef750 items=0 ppid=470 pid=13293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044945.772:19445): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044945.773:19446): table=raw family=2 entries=21 >type=SYSCALL msg=audit(1538044945.773:19446): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=16cad30 items=0 ppid=470 pid=13293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044945.773:19446): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044945.807:19447): table=filter family=10 entries=177 >type=SYSCALL msg=audit(1538044945.807:19447): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2539ec0 items=0 ppid=470 pid=13295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044945.807:19447): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044945.808:19448): table=raw family=10 entries=21 >type=SYSCALL msg=audit(1538044945.808:19448): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2516470 items=0 ppid=470 pid=13295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044945.808:19448): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538044946.820:19449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044946.820:19450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044946.829:19451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044946.852:19452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538044948.714:19453): dev=qvb0269b9a6-7f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044948.714:19453): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffe0485ed70 a2=0 a3=7ffe0485e7a0 items=0 ppid=10687 pid=13406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044948.714:19453): proctitle=6970006C696E6B007365740071766230323639623961362D37660070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538044948.760:19454): dev=qvo0269b9a6-7f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044948.760:19454): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffe123fa380 a2=0 a3=7ffe123f9da0 items=0 ppid=10687 pid=13414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044948.760:19454): proctitle=6970006C696E6B007365740071766F30323639623961362D37660070726F6D697363006F6E >type=VIRT_MACHINE_ID msg=audit(1538044949.311:19455): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 vm-ctx=system_u:system_r:svirt_t:s0:c151,c916 img-ctx=system_u:object_r:svirt_image_t:s0:c151,c916 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044949.311:19456): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044949.328:19457): dev=tap0269b9a6-7f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044949.328:19457): arch=c000003e syscall=16 success=yes exit=0 a0=55 a1=89a2 a2=7f20e5480f60 a3=53202d2064313a30 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044949.328:19457): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538044949.381:19458): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 net=fa:16:3e:f0:b0:1d path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.381:19459): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 net=fa:16:3e:f0:b0:1d path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044949.390:19460): dev=tap29210c44-5a prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044949.390:19460): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044949.390:19460): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=VIRT_RESOURCE msg=audit(1538044949.452:19461): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d6\x2dinstance\x2d00000005.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.453:19462): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d6\x2dinstance\x2d00000005.scope/" class=path path="/dev/sda" rdev=08:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.454:19463): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d6\x2dinstance\x2d00000005.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.454:19464): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d6\x2dinstance\x2d00000005.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.454:19465): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d6\x2dinstance\x2d00000005.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.454:19466): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d6\x2dinstance\x2d00000005.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.454:19467): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d6\x2dinstance\x2d00000005.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.455:19468): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d6\x2dinstance\x2d00000005.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.455:19469): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d6\x2dinstance\x2d00000005.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.455:19470): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d6\x2dinstance\x2d00000005.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.455:19471): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d6\x2dinstance\x2d00000005.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.455:19472): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d6\x2dinstance\x2d00000005.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.873:19473): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 old-disk="?" new-disk="/dev/sda" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.873:19474): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 old-net="?" new-net="fa:16:3e:f0:b0:1d" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.873:19475): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 old-chardev="?" new-chardev="/dev/pts/4" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.873:19476): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044949.873:19477): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538044949.873:19478): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 vm-pid=13480 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044949.880:19479): table=filter family=2 entries=175 >type=SYSCALL msg=audit(1538044949.880:19479): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1634680 items=0 ppid=470 pid=13524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044949.880:19479): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044949.880:19480): table=raw family=2 entries=18 >type=SYSCALL msg=audit(1538044949.880:19480): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=160bf00 items=0 ppid=470 pid=13524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044949.880:19480): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044949.904:19481): table=filter family=10 entries=149 >type=SYSCALL msg=audit(1538044949.904:19481): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2019b00 items=0 ppid=470 pid=13526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044949.904:19481): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044949.905:19482): table=raw family=10 entries=18 >type=SYSCALL msg=audit(1538044949.905:19482): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1ff3bb0 items=0 ppid=470 pid=13526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044949.905:19482): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044950.198:19483): table=filter family=2 entries=202 >type=SYSCALL msg=audit(1538044950.198:19483): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f53750 items=0 ppid=470 pid=13528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044950.198:19483): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044950.236:19484): table=filter family=10 entries=177 >type=SYSCALL msg=audit(1538044950.236:19484): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=174dec0 items=0 ppid=470 pid=13530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044950.236:19484): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538044952.070:19485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044952.070:19486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044952.082:19487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044952.112:19488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044954.135:19489): pid=13972 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044954.135:19490): pid=13972 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F766F6C756D652D30313736333032382D373263662D343737632D383636662D353832383735623135326161 terminal=? res=success' >type=CRED_REFR msg=audit(1538044954.136:19491): pid=13972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044954.166:19492): pid=13972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044954.549:19493): pid=13972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044954.549:19494): pid=13972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044954.688:19495): pid=14032 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044954.689:19496): pid=14032 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76637265617465202D2D6E616D65205F736E617073686F742D62366533666364302D386234302D346561382D616534662D336161643765613130633935202D2D736E617073686F742063696E6465722D766F6C756D65732F766F6C756D652D30313736333032382D373263662D343737632D383636662D353832383735623135326161 terminal=? res=success' >type=CRED_REFR msg=audit(1538044954.690:19497): pid=14032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044954.754:19498): pid=14032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044955.070:19499): dev=tap7a77f693-47 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1538044955.426:19500): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000003" uuid=ef76ef0a-9e69-48ac-8d08-04849504fabf vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044955.653:19501): pid=14032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044955.653:19502): pid=14032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044956.054:19503): pid=14128 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044956.054:19504): pid=14128 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044956.054:19505): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044956.088:19506): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044956.193:19507): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538044956.193:19507): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1829c40 items=0 ppid=8841 pid=14151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044956.193:19507): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538044956.768:19508): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044956.768:19509): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044956.922:19510): pid=14178 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044956.922:19511): pid=14178 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044956.923:19512): pid=14178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044956.936:19513): pid=14178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044957.279:19514): dev=tap0269b9a6-7f prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SERVICE_START msg=audit(1538044957.319:19515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044957.319:19516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044957.321:19517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044957.358:19518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=VIRT_CONTROL msg=audit(1538044957.454:19519): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000005" uuid=02903fc5-7bec-4968-9fdc-1c48de659286 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044957.749:19520): pid=14178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044957.749:19521): pid=14178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044957.889:19522): table=filter family=2 entries=200 >type=SYSCALL msg=audit(1538044957.889:19522): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=82ce30 items=0 ppid=470 pid=14269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044957.889:19522): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044957.889:19523): table=raw family=2 entries=21 >type=SYSCALL msg=audit(1538044957.889:19523): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8094d0 items=0 ppid=470 pid=14269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044957.889:19523): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044957.982:19524): table=filter family=10 entries=175 >type=SYSCALL msg=audit(1538044957.982:19524): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=15154d0 items=0 ppid=470 pid=14275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044957.982:19524): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044957.983:19525): table=raw family=10 entries=21 >type=SYSCALL msg=audit(1538044957.983:19525): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=14f2cb0 items=0 ppid=470 pid=14275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044957.983:19525): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538044957.984:19526): pid=14255 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044957.985:19527): pid=14255 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538044957.985:19528): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044958.044:19529): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044958.695:19530): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044958.696:19531): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044958.938:19532): dev=qvb7961a506-af prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044958.938:19532): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffeacdc9a40 a2=0 a3=7ffeacdc9460 items=0 ppid=10687 pid=14327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044958.938:19532): proctitle=6970006C696E6B007365740071766237393631613530362D61660070726F6D697363006F6E >type=USER_ACCT msg=audit(1538044958.971:19533): pid=14308 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044958.972:19534): pid=14308 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538044958.973:19535): pid=14308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044959.010:19536): pid=14308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044959.049:19537): dev=qvo7961a506-af prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044959.049:19537): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffe80b01560 a2=0 a3=7ffe80b00fa0 items=0 ppid=10687 pid=14340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044959.049:19537): proctitle=6970006C696E6B007365740071766F37393631613530362D61660070726F6D697363006F6E >type=USER_END msg=audit(1538044959.469:19538): pid=14308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044959.470:19539): pid=14308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044959.713:19540): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece vm-ctx=system_u:system_r:svirt_t:s0:c46,c172 img-ctx=system_u:object_r:svirt_image_t:s0:c46,c172 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044959.713:19541): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044959.729:19542): dev=tap7961a506-af prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044959.729:19542): arch=c000003e syscall=16 success=yes exit=0 a0=55 a1=89a2 a2=7f20e5c81f60 a3=53202d2037313a37 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044959.729:19542): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538044959.750:19543): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece net=fa:16:3e:b4:f7:17 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044959.750:19544): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece net=fa:16:3e:b4:f7:17 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044959.848:19545): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d7\x2dinstance\x2d00000006.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044959.848:19546): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d7\x2dinstance\x2d00000006.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044959.848:19547): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d7\x2dinstance\x2d00000006.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044959.848:19548): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d7\x2dinstance\x2d00000006.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044959.848:19549): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d7\x2dinstance\x2d00000006.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044959.848:19550): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d7\x2dinstance\x2d00000006.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044959.848:19551): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d7\x2dinstance\x2d00000006.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044959.848:19552): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d7\x2dinstance\x2d00000006.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044959.848:19553): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d7\x2dinstance\x2d00000006.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044959.848:19554): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d7\x2dinstance\x2d00000006.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044959.848:19555): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d7\x2dinstance\x2d00000006.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044959.857:19556): table=filter family=2 entries=170 >type=SYSCALL msg=audit(1538044959.857:19556): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=11e4b80 items=0 ppid=470 pid=14431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044959.857:19556): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044959.858:19557): table=raw family=2 entries=18 >type=SYSCALL msg=audit(1538044959.858:19557): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=11bcf00 items=0 ppid=470 pid=14431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044959.858:19557): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044959.892:19558): table=filter family=10 entries=146 >type=SYSCALL msg=audit(1538044959.892:19558): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=23ab540 items=0 ppid=470 pid=14437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044959.892:19558): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044959.892:19559): table=raw family=10 entries=18 >type=SYSCALL msg=audit(1538044959.892:19559): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2385c80 items=0 ppid=470 pid=14437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044959.892:19559): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=VIRT_RESOURCE msg=audit(1538044960.125:19560): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece old-disk="?" new-disk="/var/lib/nova/instances/16d39dcd-95ae-4d9b-a974-b35e2a37dece/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044960.125:19561): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece old-net="?" new-net="fa:16:3e:b4:f7:17" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044960.125:19562): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece old-chardev="?" new-chardev="/dev/pts/3" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044960.125:19563): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044960.125:19564): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538044960.125:19565): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece vm-pid=14418 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044960.448:19566): table=filter family=2 entries=198 >type=SYSCALL msg=audit(1538044960.448:19566): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=fd5ae0 items=0 ppid=470 pid=14467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044960.448:19566): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044960.449:19567): table=raw family=2 entries=21 >type=SYSCALL msg=audit(1538044960.449:19567): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=fb24d0 items=0 ppid=470 pid=14467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044960.449:19567): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044960.508:19568): table=filter family=10 entries=173 >type=SYSCALL msg=audit(1538044960.508:19568): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1ea90f0 items=0 ppid=470 pid=14469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044960.508:19568): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044960.508:19569): table=raw family=10 entries=21 >type=SYSCALL msg=audit(1538044960.508:19569): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1e86cb0 items=0 ppid=470 pid=14469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044960.508:19569): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538044960.982:19570): pid=14472 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044960.983:19571): pid=14472 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D30313736333032382D373263662D343737632D383636662D3538323837356231353261612069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538044960.983:19572): pid=14472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044961.084:19573): pid=14472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044961.751:19574): table=filter family=2 entries=171 >type=SYSCALL msg=audit(1538044961.751:19574): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1deb510 items=0 ppid=470 pid=14489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044961.751:19574): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044961.790:19575): table=filter family=10 entries=145 >type=SYSCALL msg=audit(1538044961.790:19575): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=e097a0 items=0 ppid=470 pid=14492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044961.790:19575): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538044962.302:19576): pid=14472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044962.302:19577): pid=14472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044962.465:19578): pid=14511 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044962.465:19579): pid=14511 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538044962.465:19580): pid=14511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044962.470:19581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044962.470:19582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044962.472:19583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044962.516:19584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538044962.521:19585): pid=14511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044963.400:19586): pid=14511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044963.400:19587): pid=14511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044963.518:19588): pid=14530 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044963.519:19589): pid=14530 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538044963.519:19590): pid=14530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044963.547:19591): pid=14530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044964.314:19592): pid=14530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044964.314:19593): pid=14530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044964.419:19594): pid=14545 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044964.419:19595): pid=14545 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D30313736333032382D373263662D343737632D383636662D353832383735623135326161 terminal=? res=success' >type=CRED_REFR msg=audit(1538044964.419:19596): pid=14545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044964.431:19597): pid=14545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044965.073:19598): pid=14545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044965.073:19599): pid=14545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044965.200:19600): pid=14559 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044965.201:19601): pid=14559 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538044965.201:19602): pid=14559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044965.236:19603): pid=14559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044965.405:19604): dev=qr-e34e014e-df prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044965.405:19604): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044965.405:19604): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538044965.684:19605): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538044965.684:19605): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=234efd0 items=0 ppid=8841 pid=14579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044965.684:19605): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044965.684:19606): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538044965.684:19606): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=234fff0 items=0 ppid=8841 pid=14579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044965.684:19606): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538044965.849:19607): dev=tap91ff1553-c2 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044965.849:19607): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044965.849:19607): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_END msg=audit(1538044966.183:19608): pid=14559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044966.183:19609): pid=14559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044967.468:19610): dev=qg-77ce9001-e2 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044967.468:19610): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044967.468:19610): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=SERVICE_START msg=audit(1538044967.568:19611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044967.568:19612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044967.570:19613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044967.611:19614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538044967.878:19615): table=filter family=2 entries=169 >type=SYSCALL msg=audit(1538044967.878:19615): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2612bf0 items=0 ppid=470 pid=14622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044967.878:19615): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044967.918:19616): table=filter family=10 entries=143 >type=SYSCALL msg=audit(1538044967.918:19616): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=14f2db0 items=0 ppid=470 pid=14624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044967.918:19616): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044968.291:19617): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538044968.291:19617): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7c8320 items=0 ppid=8841 pid=14630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044968.291:19617): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_STOP msg=audit(1538044970.414:19618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044972.817:19619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044972.817:19620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044972.819:19621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044972.836:19622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538044976.206:19623): pid=14664 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044976.206:19624): pid=14664 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F5F736E617073686F742D62366533666364302D386234302D346561382D616534662D336161643765613130633935 terminal=? res=success' >type=CRED_REFR msg=audit(1538044976.206:19625): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044976.227:19626): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044976.350:19627): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044976.350:19627): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044976.350:19627): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044976.350:19627): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044976.350:19627): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044976.350:19627): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044976.350:19627): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538044976.350:19627): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=14673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044976.350:19627): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=USER_END msg=audit(1538044976.575:19628): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044976.575:19629): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044976.703:19630): dev=qg-9588a94d-d5 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044976.703:19630): arch=c000003e syscall=46 success=yes exit=76 a0=12 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044976.703:19630): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_ACCT msg=audit(1538044976.763:19631): pid=14688 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044976.763:19632): pid=14688 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76637265617465202D2D6E616D6520766F6C756D652D64613234316130332D356364362D343561622D613564622D663331323336613835396136202D2D736E617073686F742063696E6465722D766F6C756D65732F5F736E617073686F742D62366533666364302D386234302D346561382D616534662D336161643765613130633935 terminal=? res=success' >type=CRED_REFR msg=audit(1538044976.763:19633): pid=14688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044976.797:19634): pid=14688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044977.328:19635): pid=14688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044977.328:19636): pid=14688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044977.335:19637): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538044977.335:19637): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=129c7b0 items=0 ppid=8841 pid=14739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.335:19637): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044977.337:19638): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538044977.337:19638): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=129e8a0 items=0 ppid=8841 pid=14739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.337:19638): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044977.338:19639): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538044977.338:19639): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=129ff60 items=0 ppid=8841 pid=14739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.338:19639): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044977.338:19640): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044977.338:19640): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=129f6b0 items=0 ppid=8841 pid=14739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.338:19640): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044977.403:19641): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538044977.403:19641): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=21b2ad0 items=0 ppid=8841 pid=14743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.403:19641): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044977.404:19642): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538044977.404:19642): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=21b3c50 items=0 ppid=8841 pid=14743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.404:19642): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044977.404:19643): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538044977.404:19643): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=21b3c50 items=0 ppid=8841 pid=14743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.404:19643): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044977.510:19644): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538044977.510:19644): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ee1a60 items=0 ppid=8841 pid=14747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.510:19644): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538044977.514:19645): pid=14741 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044977.514:19646): pid=14741 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D76657273696F6E terminal=? res=success' >type=CRED_REFR msg=audit(1538044977.514:19647): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044977.543:19648): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044977.610:19649): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538044977.610:19649): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f09ba0 items=0 ppid=8841 pid=14752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.610:19649): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044977.611:19650): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538044977.611:19650): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f0baf0 items=0 ppid=8841 pid=14752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.611:19650): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044977.611:19651): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1538044977.611:19651): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f0baf0 items=0 ppid=8841 pid=14752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.611:19651): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044977.776:19652): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044977.776:19652): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044977.776:19652): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044977.776:19652): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538044977.776:19652): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044977.776:19652): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538044977.776:19652): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538044977.776:19652): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f36cd592578 a2=0 a3=7ffdecffd9b0 items=0 ppid=8830 pid=14760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.776:19652): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=USER_END msg=audit(1538044977.795:19653): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044977.795:19654): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044977.900:19655): pid=14765 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044977.900:19656): pid=14765 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D4B2063696E6465722D766F6C756D65732F5F736E617073686F742D62366533666364302D386234302D346561382D616534662D336161643765613130633935 terminal=? res=success' >type=CRED_REFR msg=audit(1538044977.900:19657): pid=14765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044977.903:19658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044977.903:19659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044977.905:19660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044977.931:19661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538044977.934:19662): pid=14765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044977.963:19663): table=filter family=2 entries=165 >type=SYSCALL msg=audit(1538044977.963:19663): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=dad9e0 items=0 ppid=470 pid=14786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.963:19663): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044977.986:19664): table=filter family=10 entries=139 >type=SYSCALL msg=audit(1538044977.986:19664): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=c73a00 items=0 ppid=470 pid=14789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.986:19664): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538044977.988:19665): dev=tap927f9ca4-ec prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044977.988:19665): arch=c000003e syscall=46 success=yes exit=76 a0=12 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044977.988:19665): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538044978.154:19666): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538044978.154:19666): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8c2640 items=0 ppid=8795 pid=14815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044978.154:19666): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044978.156:19667): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538044978.156:19667): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8c4d20 items=0 ppid=8795 pid=14815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044978.156:19667): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044978.156:19668): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538044978.156:19668): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8c5700 items=0 ppid=8795 pid=14815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044978.156:19668): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044978.156:19669): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538044978.156:19669): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8c4d20 items=0 ppid=8795 pid=14815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044978.156:19669): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538044978.220:19670): pid=14765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044978.220:19671): pid=14765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044978.328:19672): pid=14829 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044978.328:19673): pid=14829 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D6B206E2063696E6465722D766F6C756D65732F766F6C756D652D64613234316130332D356364362D343561622D613564622D663331323336613835396136 terminal=? res=success' >type=CRED_REFR msg=audit(1538044978.328:19674): pid=14829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044978.342:19675): pid=14829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044978.750:19676): pid=14829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044978.750:19677): pid=14829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044980.064:19678): table=filter family=2 entries=167 >type=SYSCALL msg=audit(1538044980.064:19678): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1691300 items=0 ppid=470 pid=14876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044980.064:19678): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044980.102:19679): table=filter family=10 entries=141 >type=SYSCALL msg=audit(1538044980.102:19679): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1fbb3d0 items=0 ppid=470 pid=14878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044980.102:19679): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538044981.641:19680): pid=14889 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044981.641:19681): pid=14889 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D4B2063696E6465722D766F6C756D65732F766F6C756D652D64613234316130332D356364362D343561622D613564622D663331323336613835396136 terminal=? res=success' >type=CRED_REFR msg=audit(1538044981.642:19682): pid=14889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044981.689:19683): pid=14889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044981.923:19684): pid=14892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538044981.923:19685): pid=14892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538044981.924:19686): pid=14892 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=428 res=1 >type=USER_START msg=audit(1538044982.054:19687): pid=14892 uid=0 auid=163 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538044982.055:19688): pid=14892 uid=0 auid=163 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044982.315:19689): pid=14889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044982.316:19690): pid=14889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044982.545:19691): pid=14912 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044982.546:19692): pid=14912 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_REFR msg=audit(1538044982.546:19693): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044982.571:19694): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044983.068:19695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044983.068:19696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044983.069:19697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044983.113:19698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538044983.538:19699): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044983.538:19700): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044983.692:19701): pid=14937 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044983.692:19702): pid=14937 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538044983.693:19703): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044983.729:19704): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044983.962:19705): dev=qr-4f320e37-cb prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538044983.962:19705): arch=c000003e syscall=46 success=yes exit=76 a0=12 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044983.962:19705): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_END msg=audit(1538044984.779:19706): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044984.779:19707): pid=14937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044984.907:19708): pid=15009 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044984.907:19709): pid=15009 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538044984.907:19710): pid=15009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044984.915:19711): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538044984.915:19711): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bf4050 items=0 ppid=8841 pid=15015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044984.915:19711): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_START msg=audit(1538044984.945:19712): pid=15009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044985.021:19713): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538044985.021:19713): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=16253e0 items=0 ppid=8841 pid=15020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044985.021:19713): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044985.022:19714): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538044985.022:19714): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1626980 items=0 ppid=8841 pid=15020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044985.022:19714): proctitle=69707461626C65732D726573746F7265002D6E >type=CRED_DISP msg=audit(1538044985.292:19715): pid=14892 uid=0 auid=163 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044985.322:19716): pid=14892 uid=0 auid=163 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538044985.674:19717): pid=15009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044985.674:19718): pid=15009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044985.848:19719): pid=15039 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044985.849:19720): pid=15039 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206164642D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D64613234316130332D356364362D343561622D613564622D6633313233366138353961362069345A6145753357543447353752684A385A484B2078364E486245784D46783375335966432069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538044985.849:19721): pid=15039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044985.871:19722): pid=15039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044985.973:19723): table=filter family=2 entries=169 >type=SYSCALL msg=audit(1538044985.973:19723): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8b3c20 items=0 ppid=470 pid=15043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044985.973:19723): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044986.034:19724): table=filter family=10 entries=143 >type=SYSCALL msg=audit(1538044986.034:19724): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2473de0 items=0 ppid=470 pid=15045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044986.034:19724): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538044986.622:19725): pid=15039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044986.623:19726): pid=15039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538044986.752:19727): pid=15060 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538044986.752:19728): pid=15060 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538044986.753:19729): pid=15060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538044986.770:19730): pid=15060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538044987.966:19731): pid=15060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538044987.966:19732): pid=15060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044988.334:19733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044988.334:19734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044988.336:19735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044988.399:19736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538044992.849:19737): dev=qvbfd30040d-be prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044992.849:19737): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffc47bf02b0 a2=0 a3=7ffc47befce0 items=0 ppid=10687 pid=15203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044992.849:19737): proctitle=6970006C696E6B007365740071766266643330303430642D62650070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538044992.907:19738): dev=qvofd30040d-be prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044992.907:19738): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7fff225b5a50 a2=0 a3=7fff225b5460 items=0 ppid=10687 pid=15211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044992.907:19738): proctitle=6970006C696E6B007365740071766F66643330303430642D62650070726F6D697363006F6E >type=SERVICE_START msg=audit(1538044993.063:19739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044993.436:19740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044993.436:19741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044993.441:19742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044993.478:19743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=VIRT_MACHINE_ID msg=audit(1538044993.562:19744): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b vm-ctx=system_u:system_r:svirt_t:s0:c199,c305 img-ctx=system_u:object_r:svirt_image_t:s0:c199,c305 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044993.562:19745): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044993.565:19746): dev=qvb18afd017-94 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044993.565:19746): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7fff76f33a90 a2=0 a3=7fff76f334a0 items=0 ppid=10687 pid=15321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044993.565:19746): proctitle=6970006C696E6B007365740071766231386166643031372D39340070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538044993.579:19747): dev=tapfd30040d-be prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044993.579:19747): arch=c000003e syscall=16 success=yes exit=0 a0=56 a1=89a2 a2=7f20e6482f60 a3=53202d2038303a39 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044993.579:19747): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538044993.589:19748): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b net=fa:16:3e:05:49:08 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.589:19749): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b net=fa:16:3e:05:49:08 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044993.598:19750): dev=qvo18afd017-94 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044993.598:19750): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffdb2e59130 a2=0 a3=7ffdb2e58b60 items=0 ppid=10687 pid=15332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044993.598:19750): proctitle=6970006C696E6B007365740071766F31386166643031372D39340070726F6D697363006F6E >type=VIRT_RESOURCE msg=audit(1538044993.674:19751): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d8\x2dinstance\x2d00000008.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.675:19752): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d8\x2dinstance\x2d00000008.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.675:19753): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d8\x2dinstance\x2d00000008.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.675:19754): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d8\x2dinstance\x2d00000008.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.675:19755): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d8\x2dinstance\x2d00000008.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.675:19756): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d8\x2dinstance\x2d00000008.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.675:19757): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d8\x2dinstance\x2d00000008.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.676:19758): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d8\x2dinstance\x2d00000008.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.676:19759): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d8\x2dinstance\x2d00000008.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.676:19760): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d8\x2dinstance\x2d00000008.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.676:19761): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d8\x2dinstance\x2d00000008.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.944:19762): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b old-disk="?" new-disk="/var/lib/nova/instances/11731920-a980-428d-b9ec-1dea0fe1074b/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.944:19763): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b old-net="?" new-net="fa:16:3e:05:49:08" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.944:19764): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b old-chardev="?" new-chardev="/dev/pts/4" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.944:19765): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044993.944:19766): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538044993.944:19767): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b vm-pid=15334 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044994.038:19768): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 vm-ctx=system_u:system_r:svirt_t:s0:c678,c888 img-ctx=system_u:object_r:svirt_image_t:s0:c678,c888 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538044994.038:19769): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044994.046:19770): dev=tap18afd017-94 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538044994.046:19770): arch=c000003e syscall=16 success=yes exit=0 a0=57 a1=89a2 a2=7f20e447ef60 a3=53202d2037363a65 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538044994.046:19770): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538044994.063:19771): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 net=fa:16:3e:d4:5e:67 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.063:19772): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 net=fa:16:3e:d4:5e:67 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.122:19773): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d9\x2dinstance\x2d00000007.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.123:19774): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d9\x2dinstance\x2d00000007.scope/" class=path path="/dev/sda" rdev=08:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.123:19775): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d9\x2dinstance\x2d00000007.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.123:19776): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d9\x2dinstance\x2d00000007.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.124:19777): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d9\x2dinstance\x2d00000007.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.124:19778): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d9\x2dinstance\x2d00000007.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.124:19779): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d9\x2dinstance\x2d00000007.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.124:19780): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d9\x2dinstance\x2d00000007.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.125:19781): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d9\x2dinstance\x2d00000007.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.125:19782): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d9\x2dinstance\x2d00000007.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.125:19783): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d9\x2dinstance\x2d00000007.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.125:19784): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d9\x2dinstance\x2d00000007.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538044994.221:19785): table=filter family=2 entries=171 >type=SYSCALL msg=audit(1538044994.221:19785): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bcc170 items=0 ppid=470 pid=15473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044994.221:19785): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044994.222:19786): table=raw family=2 entries=18 >type=SYSCALL msg=audit(1538044994.222:19786): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ba0a10 items=0 ppid=470 pid=15473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044994.222:19786): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044994.277:19787): table=filter family=10 entries=145 >type=SYSCALL msg=audit(1538044994.277:19787): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=116b5c0 items=0 ppid=470 pid=15478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044994.277:19787): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538044994.278:19788): table=raw family=10 entries=18 >type=SYSCALL msg=audit(1538044994.278:19788): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1142330 items=0 ppid=470 pid=15478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538044994.278:19788): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=VIRT_RESOURCE msg=audit(1538044994.285:19789): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 old-disk="?" new-disk="/dev/sda" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.285:19790): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 old-net="?" new-net="fa:16:3e:d4:5e:67" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.285:19791): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 old-chardev="?" new-chardev="/dev/pts/5" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.285:19792): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538044994.285:19793): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538044994.285:19794): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 vm-pid=15438 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538044997.912:19795): dev=tap18afd017-94 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1538044998.109:19796): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000007" uuid=879eed22-3bbc-4a10-b51f-6848187a56b5 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044998.569:19797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044998.569:19798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538044998.572:19799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538044998.594:19800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045000.109:19801): table=filter family=2 entries=228 >type=SYSCALL msg=audit(1538045000.109:19801): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=6b3540 items=0 ppid=470 pid=15601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045000.109:19801): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045000.109:19802): table=raw family=2 entries=24 >type=SYSCALL msg=audit(1538045000.109:19802): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=68b330 items=0 ppid=470 pid=15601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045000.109:19802): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045000.131:19803): table=filter family=10 entries=202 >type=SYSCALL msg=audit(1538045000.131:19803): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=e4db90 items=0 ppid=470 pid=15604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045000.131:19803): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045000.131:19804): table=raw family=10 entries=24 >type=SYSCALL msg=audit(1538045000.131:19804): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=e25c50 items=0 ppid=470 pid=15604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045000.131:19804): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045000.416:19805): pid=15607 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045000.417:19806): pid=15607 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D64613234316130332D356364362D343561622D613564622D6633313233366138353961362069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538045000.417:19807): pid=15607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045000.452:19808): pid=15607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045001.076:19809): pid=15607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045001.076:19810): pid=15607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045001.249:19811): pid=15623 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045001.249:19812): pid=15623 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045001.249:19813): pid=15623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045001.283:19814): pid=15623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045001.988:19815): pid=15623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045001.988:19816): pid=15623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045002.265:19817): pid=15643 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045002.266:19818): pid=15643 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045002.266:19819): pid=15643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045002.277:19820): pid=15643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045002.765:19821): pid=15643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045002.765:19822): pid=15643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045002.893:19823): pid=15663 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045002.893:19824): pid=15663 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D64613234316130332D356364362D343561622D613564622D663331323336613835396136 terminal=? res=success' >type=CRED_REFR msg=audit(1538045002.893:19825): pid=15663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045002.903:19826): pid=15663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045003.478:19827): pid=15663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045003.478:19828): pid=15663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045003.598:19829): pid=15689 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045003.598:19830): pid=15689 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045003.599:19831): pid=15689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045003.614:19832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045003.614:19833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045003.617:19834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045003.693:19835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538045003.698:19836): pid=15689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045004.313:19837): pid=15689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045004.314:19838): pid=15689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045004.834:19839): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045004.834:19839): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=b7ae50 items=0 ppid=8841 pid=15728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045004.834:19839): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045004.981:19840): pid=15731 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045004.981:19841): pid=15731 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045004.981:19842): pid=15731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045004.997:19843): pid=15731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045005.633:19844): pid=15731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045005.633:19845): pid=15731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045005.814:19846): pid=15760 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045005.814:19847): pid=15760 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F766F6C756D652D64613234316130332D356364362D343561622D613564622D663331323336613835396136 terminal=? res=success' >type=CRED_REFR msg=audit(1538045005.815:19848): pid=15760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045005.827:19849): pid=15760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045006.360:19850): pid=15760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045006.360:19851): pid=15760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045006.447:19852): pid=15770 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045006.448:19853): pid=15770 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F5F736E617073686F742D62366533666364302D386234302D346561382D616534662D336161643765613130633935 terminal=? res=success' >type=CRED_REFR msg=audit(1538045006.449:19854): pid=15770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045006.476:19855): pid=15770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045006.526:19856): pid=15774 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045006.526:19857): pid=15774 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76646973706C6179202D2D6E6F68656164696E67202D43202D6F20417474722063696E6465722D766F6C756D65732F766F6C756D652D64613234316130332D356364362D343561622D613564622D663331323336613835396136 terminal=? res=success' >type=CRED_REFR msg=audit(1538045006.526:19858): pid=15774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045006.542:19859): pid=15774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045006.828:19860): pid=15770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045006.828:19861): pid=15770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045006.945:19862): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045006.945:19862): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1406c40 items=0 ppid=8841 pid=15791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045006.945:19862): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045006.967:19863): pid=15787 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045006.967:19864): pid=15787 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C7672656D6F7665202D2D636F6E6669672061637469766174696F6E207B2072657472795F646561637469766174696F6E203D20317D20202D662063696E6465722D766F6C756D65732F5F736E617073686F742D62366533666364302D386234302D346561382D616534662D336161643765613130633935 terminal=? res=success' >type=CRED_REFR msg=audit(1538045006.967:19865): pid=15787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045006.979:19866): pid=15787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045007.072:19867): pid=15774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045007.072:19868): pid=15774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045007.273:19869): pid=15803 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045007.273:19870): pid=15803 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C7672656D6F7665202D2D636F6E6669672061637469766174696F6E207B2072657472795F646561637469766174696F6E203D20317D20202D662063696E6465722D766F6C756D65732F766F6C756D652D64613234316130332D356364362D343561622D613564622D663331323336613835396136 terminal=? res=success' >type=CRED_REFR msg=audit(1538045007.273:19871): pid=15803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045007.286:19872): pid=15803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045007.292:19873): pid=15787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045007.292:19874): pid=15787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045007.946:19875): pid=15803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045007.946:19876): pid=15803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045008.120:19877): table=filter family=2 entries=201 >type=SYSCALL msg=audit(1538045008.120:19877): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=12bdf70 items=0 ppid=470 pid=15866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045008.120:19877): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045008.232:19878): pid=15867 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045008.232:19879): pid=15867 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045008.232:19880): pid=15867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045008.269:19881): pid=15867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045008.408:19882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045008.774:19883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045008.774:19884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045008.777:19885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045008.778:19886): pid=15867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045008.778:19887): pid=15867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045008.793:19888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045008.914:19889): pid=15887 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045008.914:19890): pid=15887 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045008.914:19891): pid=15887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045008.940:19892): pid=15887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045009.164:19893): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=detach vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea old-disk="/dev/sdb" new-disk="?" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045009.176:19894): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=path path="/dev/mapper/control" rdev=0A:EC acl=rwm exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045009.177:19895): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d5\x2dinstance\x2d00000002.scope/" class=path path="/dev/sdb" rdev=08:10 acl=rwm exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045009.467:19896): pid=15887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045009.467:19897): pid=15887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045009.564:19898): pid=15914 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045009.565:19899): pid=15914 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045009.565:19900): pid=15914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045009.584:19901): pid=15914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045009.653:19902): pid=15916 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045009.654:19903): pid=15916 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045009.654:19904): pid=15916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045009.670:19905): pid=15916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045010.079:19906): pid=15914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045010.080:19907): pid=15914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045010.203:19908): pid=15938 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045010.203:19909): pid=15938 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F766F6C756D652D30313736333032382D373263662D343737632D383636662D353832383735623135326161 terminal=? res=success' >type=CRED_REFR msg=audit(1538045010.204:19910): pid=15938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045010.223:19911): pid=15938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045010.305:19912): pid=15939 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045010.306:19913): pid=15939 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D34643333336432632D306432652D346438372D623163392D6461376538353438613237612069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538045010.306:19914): pid=15939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045010.316:19915): pid=15939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045010.319:19916): pid=15916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045010.320:19917): pid=15916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045010.451:19918): pid=15948 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045010.452:19919): pid=15948 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045010.452:19920): pid=15948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045010.519:19921): pid=15948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045010.786:19922): pid=15948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045010.786:19923): pid=15948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045010.866:19924): pid=15938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045010.866:19925): pid=15938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045011.004:19926): pid=16040 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045011.004:19927): pid=16040 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76646973706C6179202D2D6E6F68656164696E67202D43202D6F20417474722063696E6465722D766F6C756D65732F766F6C756D652D30313736333032382D373263662D343737632D383636662D353832383735623135326161 terminal=? res=success' >type=CRED_REFR msg=audit(1538045011.005:19928): pid=16040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045011.016:19929): pid=16040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045011.107:19930): pid=15939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045011.107:19931): pid=15939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045011.242:19932): pid=16040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045011.242:19933): pid=16040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045011.243:19934): pid=16090 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045011.244:19935): pid=16090 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045011.244:19936): pid=16090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045011.255:19937): pid=16090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045011.419:19938): pid=16114 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045011.420:19939): pid=16114 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C7672656D6F7665202D2D636F6E6669672061637469766174696F6E207B2072657472795F646561637469766174696F6E203D20317D20202D662063696E6465722D766F6C756D65732F766F6C756D652D30313736333032382D373263662D343737632D383636662D353832383735623135326161 terminal=? res=success' >type=CRED_REFR msg=audit(1538045011.420:19940): pid=16114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045011.431:19941): pid=16114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045011.759:19942): pid=16090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045011.759:19943): pid=16090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045011.919:19944): pid=16224 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045011.919:19945): pid=16224 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045011.919:19946): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045011.943:19947): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045012.078:19948): pid=16114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045012.078:19949): pid=16114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045012.301:19950): pid=16321 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045012.302:19951): pid=16321 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045012.302:19952): pid=16321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045012.399:19953): pid=16321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045013.126:19954): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045013.126:19955): pid=16224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045013.239:19956): pid=16467 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045013.239:19957): pid=16467 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D34643333336432632D306432652D346438372D623163392D646137653835343861323761 terminal=? res=success' >type=CRED_REFR msg=audit(1538045013.239:19958): pid=16467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045013.273:19959): pid=16321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045013.273:19960): pid=16467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045013.293:19961): pid=16321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045013.394:19962): pid=16507 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045013.394:19963): pid=16507 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045013.395:19964): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045013.407:19965): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045013.811:19966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045013.811:19967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045013.813:19968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045013.821:19969): pid=16467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045013.821:19970): pid=16467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045013.852:19971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045013.860:19972): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045013.860:19973): pid=16507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045013.961:19974): pid=16545 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045013.961:19975): pid=16545 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045013.961:19976): pid=16545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045013.984:19977): pid=16545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045014.041:19978): pid=16547 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045014.041:19979): pid=16547 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045014.042:19980): pid=16547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045014.066:19981): pid=16547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045014.332:19982): pid=16547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045014.332:19983): pid=16547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045014.489:19984): pid=16566 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045014.490:19985): pid=16566 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045014.490:19986): pid=16566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045014.516:19987): pid=16566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045014.556:19988): pid=16545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045014.556:19989): pid=16545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045014.773:19990): pid=16566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045014.773:19991): pid=16566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045014.819:19992): pid=16591 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045014.820:19993): pid=16591 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D70667741444D5866356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D terminal=? res=success' >type=CRED_REFR msg=audit(1538045014.820:19994): pid=16591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045014.856:19995): pid=16591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045015.159:19996): pid=16591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045015.159:19997): pid=16591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045015.324:19998): pid=16643 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045015.324:19999): pid=16643 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D70667741444D5866356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D terminal=? res=success' >type=CRED_REFR msg=audit(1538045015.324:20000): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045015.341:20001): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045015.568:20002): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045015.568:20003): pid=16643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045015.713:20004): pid=16664 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045015.713:20005): pid=16664 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76637265617465202D54202D56203167202D6E20766F6C756D652D30656361356439382D366438342D343536632D393061612D6263366664343038343861632063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045015.714:20006): pid=16664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045015.735:20007): pid=16664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045015.992:20008): pid=16668 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045015.993:20009): pid=16668 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045016.007:20010): pid=16668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045016.059:20011): pid=16668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045016.316:20012): pid=16677 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045016.316:20013): pid=16677 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045016.316:20014): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045016.323:20015): pid=16664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045016.323:20016): pid=16664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045016.399:20017): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045016.400:20018): pid=16668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045016.400:20019): pid=16668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045016.525:20020): pid=16699 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045016.526:20021): pid=16699 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D706C33537A4456 terminal=? res=success' >type=CRED_REFR msg=audit(1538045016.526:20022): pid=16699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045016.554:20023): pid=16702 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045016.554:20024): pid=16702 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045016.555:20025): pid=16702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045016.569:20026): pid=16699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045016.590:20027): pid=16702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045016.937:20028): pid=16702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045016.937:20029): pid=16702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045016.961:20030): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045016.961:20031): pid=16677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045016.964:20032): pid=16699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045016.964:20033): pid=16699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045017.059:20034): pid=16728 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045017.059:20035): pid=16728 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045017.059:20036): pid=16728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045017.082:20037): table=nat family=2 entries=33 >type=SYSCALL msg=audit(1538045017.082:20037): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f0d100 items=0 ppid=8841 pid=16879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045017.082:20037): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045017.089:20038): dev=tap7961a506-af prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=USER_START msg=audit(1538045017.104:20039): pid=16728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045017.211:20040): pid=16876 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045017.212:20041): pid=16876 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F766F6C756D652D34643333336432632D306432652D346438372D623163392D646137653835343861323761 terminal=? res=success' >type=CRED_REFR msg=audit(1538045017.212:20042): pid=16876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045017.214:20043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045017.221:20044): pid=16880 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045017.222:20045): pid=16880 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D70667741444D5866356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D terminal=? res=success' >type=CRED_REFR msg=audit(1538045017.222:20046): pid=16880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045017.353:20047): pid=16880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045017.358:20048): pid=16876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045017.417:20049): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000006" uuid=16d39dcd-95ae-4d9b-a974-b35e2a37dece vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045017.672:20050): pid=16728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045017.672:20051): pid=16728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045017.819:20052): pid=16959 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045017.819:20053): pid=16959 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045017.820:20054): pid=16959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045017.840:20055): pid=16959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045017.933:20056): pid=16880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045017.933:20057): pid=16880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045018.055:20058): pid=16876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045018.055:20059): pid=16876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045018.071:20060): pid=16967 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045018.071:20061): pid=16967 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620646420636F756E743D302069663D2F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D70667741444D5866356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D206F663D2F6465762F6D61707065722F63696E6465722D2D766F6C756D65732D766F6C756D652D2D30656361356439382D2D366438342D2D343536632D2D393061612D2D626336666434303834386163206F666C61673D646972656374 terminal=? res=success' >type=CRED_REFR msg=audit(1538045018.072:20062): pid=16967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045018.101:20063): table=filter family=2 entries=199 >type=SYSCALL msg=audit(1538045018.101:20063): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1117c20 items=0 ppid=470 pid=16980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045018.101:20063): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045018.101:20064): table=raw family=2 entries=21 >type=SYSCALL msg=audit(1538045018.101:20064): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10f44d0 items=0 ppid=470 pid=16980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045018.101:20064): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=USER_START msg=audit(1538045018.107:20065): pid=16967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045018.108:20066): pid=16959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045018.108:20067): pid=16959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045018.126:20068): table=filter family=10 entries=174 >type=SYSCALL msg=audit(1538045018.126:20068): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1e28240 items=0 ppid=470 pid=16985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045018.126:20068): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045018.126:20069): table=raw family=10 entries=21 >type=SYSCALL msg=audit(1538045018.126:20069): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1e05cb0 items=0 ppid=470 pid=16985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045018.126:20069): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045018.164:20070): pid=16978 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045018.164:20071): pid=16978 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76646973706C6179202D2D6E6F68656164696E67202D43202D6F20417474722063696E6465722D766F6C756D65732F766F6C756D652D34643333336432632D306432652D346438372D623163392D646137653835343861323761 terminal=? res=success' >type=CRED_REFR msg=audit(1538045018.164:20072): pid=16978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045018.187:20073): pid=16978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045018.523:20074): pid=16967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045018.524:20075): pid=16967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045018.720:20076): pid=17004 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045018.720:20077): pid=17004 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662071656D752D696D6720636F6E76657274202D4F20726177202D74206E6F6E65202D662071636F7732202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D70667741444D5866356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D202F6465762F6D61707065722F63696E6465722D2D766F6C756D65732D766F6C756D652D2D30656361356439382D2D366438342D2D343536632D2D393061612D2D626336666434303834386163 terminal=? res=success' >type=CRED_REFR msg=audit(1538045018.721:20078): pid=17004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045018.765:20079): pid=17004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045018.812:20080): pid=16978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045018.812:20081): pid=16978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045018.994:20082): pid=17011 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045018.995:20083): pid=17011 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C7672656D6F7665202D2D636F6E6669672061637469766174696F6E207B2072657472795F646561637469766174696F6E203D20317D20202D662063696E6465722D766F6C756D65732F766F6C756D652D34643333336432632D306432652D346438372D623163392D646137653835343861323761 terminal=? res=success' >type=CRED_REFR msg=audit(1538045018.995:20084): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045018.999:20085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045018.999:20086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045019.000:20087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045019.045:20088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538045019.049:20089): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045019.767:20090): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045019.767:20091): pid=17011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045020.058:20092): pid=17004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045020.058:20093): pid=17004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045020.197:20094): pid=17037 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045020.198:20095): pid=17037 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045020.198:20096): pid=17037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045020.233:20097): pid=17037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045020.311:20098): pid=17043 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045020.312:20099): pid=17043 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D70667741444D5866356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D terminal=? res=success' >type=CRED_REFR msg=audit(1538045020.312:20100): pid=17043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045020.327:20101): pid=17043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045020.504:20102): pid=17037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045020.504:20103): pid=17037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045020.640:20104): pid=17043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045020.640:20105): pid=17043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045020.651:20106): pid=17065 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045020.651:20107): pid=17065 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045020.652:20108): pid=17065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045020.679:20109): pid=17065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045020.938:20110): pid=17065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045020.938:20111): pid=17065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045021.085:20112): pid=17080 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045021.085:20113): pid=17080 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045021.085:20114): pid=17080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045021.096:20115): pid=17080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045021.158:20116): dev=tap9a593e02-a9 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1538045021.539:20117): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000002" uuid=111b05cc-4878-4120-adbc-a71d02a3e1ea vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045021.757:20118): pid=17080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045021.757:20119): pid=17080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045021.918:20120): pid=17138 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045021.919:20121): pid=17138 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045021.919:20122): pid=17138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045021.975:20123): pid=17138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045022.187:20124): table=filter family=2 entries=171 >type=SYSCALL msg=audit(1538045022.187:20124): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bda510 items=0 ppid=470 pid=17160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045022.187:20124): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045022.187:20125): table=raw family=2 entries=18 >type=SYSCALL msg=audit(1538045022.187:20125): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bbb680 items=0 ppid=470 pid=17160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045022.187:20125): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045022.225:20126): table=filter family=10 entries=147 >type=SYSCALL msg=audit(1538045022.225:20126): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=254ab80 items=0 ppid=470 pid=17162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045022.225:20126): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045022.226:20127): table=raw family=10 entries=18 >type=SYSCALL msg=audit(1538045022.226:20127): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=252dd10 items=0 ppid=470 pid=17162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045022.226:20127): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045022.257:20128): pid=17138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045022.258:20129): pid=17138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045023.042:20130): pid=17178 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045023.042:20131): pid=17178 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F766F6C756D652D30656361356439382D366438342D343536632D393061612D626336666434303834386163 terminal=? res=success' >type=CRED_REFR msg=audit(1538045023.043:20132): pid=17178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045023.084:20133): pid=17178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045023.467:20134): pid=17178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045023.468:20135): pid=17178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045023.624:20136): pid=17190 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045023.625:20137): pid=17190 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76637265617465202D2D6E616D65205F736E617073686F742D31626564663331312D386131662D343934622D396463352D643761623566343935343135202D2D736E617073686F742063696E6465722D766F6C756D65732F766F6C756D652D30656361356439382D366438342D343536632D393061612D626336666434303834386163 terminal=? res=success' >type=CRED_REFR msg=audit(1538045023.625:20138): pid=17190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045023.646:20139): pid=17190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045024.068:20140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045024.068:20141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045024.071:20142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045024.117:20143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045024.376:20144): pid=17190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045024.376:20145): pid=17190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045026.504:20146): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045026.504:20146): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1c99c40 items=0 ppid=8841 pid=17232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045026.504:20146): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045026.533:20147): dev=tap32317632-e7 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1538045026.904:20148): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000001" uuid=33ad5527-0233-4b0e-86e9-39f904876c8d vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045028.073:20149): table=filter family=2 entries=144 >type=SYSCALL msg=audit(1538045028.073:20149): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=133ff30 items=0 ppid=470 pid=17305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045028.073:20149): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045028.103:20150): table=filter family=10 entries=119 >type=SYSCALL msg=audit(1538045028.103:20150): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1d17230 items=0 ppid=470 pid=17307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045028.103:20150): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045028.262:20151): table=filter family=2 entries=142 >type=SYSCALL msg=audit(1538045028.262:20151): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f54610 items=0 ppid=470 pid=17312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045028.262:20151): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045028.262:20152): table=raw family=2 entries=15 >type=SYSCALL msg=audit(1538045028.262:20152): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f3a820 items=0 ppid=470 pid=17312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045028.262:20152): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045028.291:20153): table=filter family=10 entries=117 >type=SYSCALL msg=audit(1538045028.291:20153): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=96d840 items=0 ppid=470 pid=17314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045028.291:20153): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045028.291:20154): table=raw family=10 entries=15 >type=SYSCALL msg=audit(1538045028.291:20154): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=956d70 items=0 ppid=470 pid=17314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045028.291:20154): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045029.322:20155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045029.322:20156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045029.326:20157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045029.358:20158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045030.938:20159): pid=17331 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045030.939:20160): pid=17331 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F5F736E617073686F742D31626564663331312D386131662D343934622D396463352D643761623566343935343135 terminal=? res=success' >type=CRED_REFR msg=audit(1538045030.939:20161): pid=17331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045030.981:20162): pid=17331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045031.419:20163): pid=17331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045031.419:20164): pid=17331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045031.522:20165): pid=17340 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045031.522:20166): pid=17340 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76637265617465202D2D6E616D6520766F6C756D652D65313063306564652D326531612D343933312D623361632D646538393933656231333334202D2D736E617073686F742063696E6465722D766F6C756D65732F5F736E617073686F742D31626564663331312D386131662D343934622D396463352D643761623566343935343135 terminal=? res=success' >type=CRED_REFR msg=audit(1538045031.523:20167): pid=17340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045031.563:20168): pid=17340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045031.817:20169): dev=qr-c8546bde-63 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045031.817:20169): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045031.817:20169): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045032.042:20170): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538045032.042:20170): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=20a6fd0 items=0 ppid=8841 pid=17366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045032.042:20170): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045032.042:20171): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045032.042:20171): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=20a7ff0 items=0 ppid=8841 pid=17366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045032.042:20171): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045032.110:20172): pid=17340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045032.110:20173): pid=17340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045032.271:20174): pid=17372 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045032.272:20175): pid=17372 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D4B2063696E6465722D766F6C756D65732F5F736E617073686F742D31626564663331312D386131662D343934622D396463352D643761623566343935343135 terminal=? res=success' >type=CRED_REFR msg=audit(1538045032.272:20176): pid=17372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045032.305:20177): pid=17372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045032.847:20178): pid=17372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045032.847:20179): pid=17372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045032.971:20180): pid=17393 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045032.972:20181): pid=17393 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D6B206E2063696E6465722D766F6C756D65732F766F6C756D652D65313063306564652D326531612D343933312D623361632D646538393933656231333334 terminal=? res=success' >type=CRED_REFR msg=audit(1538045032.972:20182): pid=17393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045032.985:20183): pid=17393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045033.103:20184): dev=qg-f42e642e-91 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045033.103:20184): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045033.103:20184): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_END msg=audit(1538045033.390:20185): pid=17393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045033.390:20186): pid=17393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045034.141:20187): table=filter family=2 entries=114 >type=SYSCALL msg=audit(1538045034.141:20187): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ab6f00 items=0 ppid=470 pid=17433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045034.141:20187): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045034.177:20188): table=filter family=10 entries=90 >type=SYSCALL msg=audit(1538045034.177:20188): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=90e180 items=0 ppid=470 pid=17436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045034.177:20188): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045034.190:20189): pid=17427 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045034.191:20190): pid=17427 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D4B2063696E6465722D766F6C756D65732F766F6C756D652D65313063306564652D326531612D343933312D623361632D646538393933656231333334 terminal=? res=success' >type=CRED_REFR msg=audit(1538045034.191:20191): pid=17427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045034.218:20192): pid=17427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045034.573:20193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045034.573:20194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045034.575:20195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045034.603:20196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045034.835:20197): pid=17427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045034.835:20198): pid=17427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045035.104:20199): pid=17453 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045035.104:20200): pid=17453 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_REFR msg=audit(1538045035.105:20201): pid=17453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045035.128:20202): pid=17453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045035.943:20203): pid=17453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045035.943:20204): pid=17453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045036.087:20205): pid=17474 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045036.087:20206): pid=17474 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045036.088:20207): pid=17474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045036.119:20208): table=filter family=2 entries=112 >type=SYSCALL msg=audit(1538045036.119:20208): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b115e0 items=0 ppid=470 pid=17477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045036.119:20208): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=USER_START msg=audit(1538045036.139:20209): pid=17474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045036.157:20210): table=filter family=10 entries=88 >type=SYSCALL msg=audit(1538045036.157:20210): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1360790 items=0 ppid=470 pid=17480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045036.157:20210): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045036.333:20211): dev=tap9f77220b-78 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045036.333:20211): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045036.333:20211): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_END msg=audit(1538045037.097:20212): pid=17474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045037.097:20213): pid=17474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045037.212:20214): pid=17500 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045037.213:20215): pid=17500 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045037.213:20216): pid=17500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045037.244:20217): pid=17500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045037.414:20218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045037.884:20219): pid=17500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045037.884:20220): pid=17500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045038.048:20221): pid=17516 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045038.048:20222): pid=17516 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206164642D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D65313063306564652D326531612D343933312D623361632D646538393933656231333334204373653337474E444B6F684369394252434D705A20334A58796B5270596F335475435334542069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538045038.048:20223): pid=17516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045038.097:20224): pid=17516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045038.134:20225): table=filter family=2 entries=110 >type=SYSCALL msg=audit(1538045038.134:20225): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1d56cc0 items=0 ppid=470 pid=17525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045038.134:20225): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045038.145:20226): dev=qr-afb8ece0-5b prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045038.145:20226): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045038.145:20226): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045038.184:20227): table=filter family=10 entries=86 >type=SYSCALL msg=audit(1538045038.184:20227): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2233da0 items=0 ppid=470 pid=17528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045038.184:20227): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045038.290:20228): dev=qg-4ca23e49-64 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045038.290:20228): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045038.290:20228): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045038.388:20229): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045038.388:20229): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=6b4ff0 items=0 ppid=8841 pid=17536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045038.388:20229): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045038.389:20230): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045038.389:20230): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=6b4770 items=0 ppid=8841 pid=17536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045038.389:20230): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045038.470:20231): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538045038.470:20231): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=c40fd0 items=0 ppid=8841 pid=17541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045038.470:20231): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045038.471:20232): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538045038.471:20232): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=c41c90 items=0 ppid=8841 pid=17541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045038.471:20232): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045039.161:20233): pid=17516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045039.161:20234): pid=17516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045039.330:20235): pid=17554 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045039.330:20236): pid=17554 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045039.330:20237): pid=17554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045039.348:20238): pid=17554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045039.697:20239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045039.697:20240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045039.699:20241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045039.721:20242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045040.169:20243): pid=17554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045040.169:20244): pid=17554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045040.197:20245): table=filter family=2 entries=108 >type=SYSCALL msg=audit(1538045040.197:20245): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e463a0 items=0 ppid=470 pid=17591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045040.197:20245): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045040.242:20246): table=filter family=10 entries=84 >type=SYSCALL msg=audit(1538045040.242:20246): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1d9d3b0 items=0 ppid=470 pid=17593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045040.242:20246): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045041.352:20247): pid=17634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045041.353:20248): pid=17634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045041.355:20249): pid=17634 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=429 res=1 >type=USER_START msg=audit(1538045041.427:20250): pid=17634 uid=0 auid=163 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045041.428:20251): pid=17634 uid=0 auid=163 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045042.353:20252): dev=tap4836e55c-96 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045042.353:20252): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045042.353:20252): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538045042.684:20253): dev=qvb7c5b0488-5f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045042.684:20253): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffe25e58290 a2=0 a3=7ffe25e57ca0 items=0 ppid=10687 pid=17699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045042.684:20253): proctitle=6970006C696E6B007365740071766237633562303438382D35660070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045042.748:20254): dev=qvo7c5b0488-5f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045042.748:20254): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffc7aea4c80 a2=0 a3=7ffc7aea46a0 items=0 ppid=10687 pid=17714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045042.748:20254): proctitle=6970006C696E6B007365740071766F37633562303438382D35660070726F6D697363006F6E >type=SERVICE_START msg=audit(1538045042.841:20255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045043.216:20256): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 vm-ctx=system_u:system_r:svirt_t:s0:c540,c633 img-ctx=system_u:object_r:svirt_image_t:s0:c540,c633 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045043.216:20257): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045043.231:20258): dev=tap7c5b0488-5f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045043.231:20258): arch=c000003e syscall=16 success=yes exit=0 a0=54 a1=89a2 a2=7f20e5c81f60 a3=53202d2039343a30 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045043.231:20258): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045043.263:20259): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 net=fa:16:3e:72:c0:49 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.263:20260): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 net=fa:16:3e:72:c0:49 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.309:20261): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d10\x2dinstance\x2d00000009.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.309:20262): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d10\x2dinstance\x2d00000009.scope/" class=path path="/dev/sda" rdev=08:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.310:20263): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d10\x2dinstance\x2d00000009.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.310:20264): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d10\x2dinstance\x2d00000009.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.310:20265): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d10\x2dinstance\x2d00000009.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.310:20266): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d10\x2dinstance\x2d00000009.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.310:20267): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d10\x2dinstance\x2d00000009.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.310:20268): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d10\x2dinstance\x2d00000009.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.310:20269): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d10\x2dinstance\x2d00000009.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.310:20270): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d10\x2dinstance\x2d00000009.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.310:20271): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d10\x2dinstance\x2d00000009.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.310:20272): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d10\x2dinstance\x2d00000009.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.562:20273): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 old-disk="?" new-disk="/dev/sda" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.562:20274): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 old-net="?" new-net="fa:16:3e:72:c0:49" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.562:20275): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 old-chardev="?" new-chardev="/dev/pts/1" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.562:20276): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045043.562:20277): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045043.562:20278): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 vm-pid=17787 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045043.790:20279): dev=tapfd30040d-be prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1538045044.142:20280): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000008" uuid=11731920-a980-428d-b9ec-1dea0fe1074b vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045044.218:20281): table=filter family=2 entries=106 >type=SYSCALL msg=audit(1538045044.218:20281): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f53030 items=0 ppid=470 pid=17859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045044.218:20281): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045044.219:20282): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538045044.219:20282): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f37f50 items=0 ppid=470 pid=17859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045044.219:20282): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045044.259:20283): table=filter family=10 entries=82 >type=SYSCALL msg=audit(1538045044.259:20283): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=d12e20 items=0 ppid=470 pid=17874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045044.259:20283): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045044.259:20284): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538045044.259:20284): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=cfbf80 items=0 ppid=470 pid=17874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045044.259:20284): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=CRED_DISP msg=audit(1538045044.323:20285): pid=17634 uid=0 auid=163 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045044.360:20286): pid=17634 uid=0 auid=163 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=NETFILTER_CFG msg=audit(1538045044.525:20287): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045044.525:20287): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2490c40 items=0 ppid=8841 pid=17892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045044.525:20287): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045044.819:20288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045044.819:20289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045044.822:20290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045044.848:20291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045044.889:20292): table=filter family=2 entries=133 >type=SYSCALL msg=audit(1538045044.889:20292): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1bbc060 items=0 ppid=470 pid=17905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045044.889:20292): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045044.925:20293): table=filter family=10 entries=110 >type=SYSCALL msg=audit(1538045044.925:20293): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2571310 items=0 ppid=470 pid=17907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045044.925:20293): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045046.672:20294): table=filter family=2 entries=131 >type=SYSCALL msg=audit(1538045046.672:20294): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1c0c740 items=0 ppid=470 pid=17924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045046.672:20294): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045046.672:20295): table=raw family=2 entries=15 >type=SYSCALL msg=audit(1538045046.672:20295): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1bf5080 items=0 ppid=470 pid=17924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045046.672:20295): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045046.698:20296): table=filter family=10 entries=108 >type=SYSCALL msg=audit(1538045046.698:20296): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=ebd920 items=0 ppid=470 pid=17926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045046.698:20296): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045046.698:20297): table=raw family=10 entries=15 >type=SYSCALL msg=audit(1538045046.698:20297): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=ea9530 items=0 ppid=470 pid=17926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045046.698:20297): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045048.319:20298): dev=tap7c5b0488-5f prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1538045048.512:20299): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000009" uuid=84708ac5-443f-4700-be73-8403d8c06f41 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045050.069:20300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045050.069:20301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045050.071:20302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045050.104:20303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045050.204:20304): table=filter family=2 entries=101 >type=SYSCALL msg=audit(1538045050.204:20304): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=12fdce0 items=0 ppid=470 pid=18022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045050.204:20304): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045050.204:20305): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538045050.204:20305): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=12eb230 items=0 ppid=470 pid=18022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045050.204:20305): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045050.232:20306): table=filter family=10 entries=79 >type=SYSCALL msg=audit(1538045050.232:20306): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1461e80 items=0 ppid=470 pid=18024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045050.232:20306): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045050.232:20307): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538045050.232:20307): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1453590 items=0 ppid=470 pid=18024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045050.232:20307): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045051.098:20308): pid=18033 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045051.099:20309): pid=18033 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D65313063306564652D326531612D343933312D623361632D6465383939336562313333342069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538045051.099:20310): pid=18033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045051.136:20311): pid=18033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045051.937:20312): pid=18033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045051.937:20313): pid=18033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045052.103:20314): pid=18059 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045052.104:20315): pid=18059 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045052.104:20316): pid=18059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045052.124:20317): table=filter family=2 entries=74 >type=SYSCALL msg=audit(1538045052.124:20317): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=13bc700 items=0 ppid=470 pid=18062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045052.124:20317): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=USER_START msg=audit(1538045052.127:20318): pid=18059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045052.148:20319): table=filter family=10 entries=51 >type=SYSCALL msg=audit(1538045052.148:20319): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=21ad530 items=0 ppid=470 pid=18065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045052.148:20319): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045053.128:20320): pid=18059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045053.128:20321): pid=18059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045053.731:20322): pid=18079 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045053.732:20323): pid=18079 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045053.732:20324): pid=18079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045053.757:20325): pid=18079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045054.359:20326): pid=18079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045054.360:20327): pid=18079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045054.461:20328): pid=18096 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045054.461:20329): pid=18096 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D65313063306564652D326531612D343933312D623361632D646538393933656231333334 terminal=? res=success' >type=CRED_REFR msg=audit(1538045054.462:20330): pid=18096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045054.445:20331): dev=qr-4f320e37-cb prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045054.445:20331): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045054.445:20331): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_START msg=audit(1538045054.480:20332): pid=18096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045054.635:20333): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538045054.635:20333): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=68cfd0 items=0 ppid=8841 pid=18109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045054.635:20333): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045054.635:20334): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045054.635:20334): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=68dff0 items=0 ppid=8841 pid=18109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045054.635:20334): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045055.296:20335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045055.296:20336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045055.297:20337): pid=18096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045055.297:20338): pid=18096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045055.299:20339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045055.328:20340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045055.481:20341): pid=18125 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045055.482:20342): pid=18125 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045055.482:20343): pid=18125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045055.492:20344): pid=18125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045056.168:20345): pid=18125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045056.168:20346): pid=18125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045056.543:20347): dev=tap927f9ca4-ec prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045056.543:20347): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045056.543:20347): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_ACCT msg=audit(1538045057.068:20348): pid=18158 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045057.069:20349): pid=18158 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045057.069:20350): pid=18158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045057.094:20351): pid=18158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045057.724:20352): pid=18158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045057.724:20353): pid=18158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045057.863:20354): pid=18180 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045057.863:20355): pid=18180 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F766F6C756D652D65313063306564652D326531612D343933312D623361632D646538393933656231333334 terminal=? res=success' >type=CRED_REFR msg=audit(1538045057.863:20356): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045057.882:20357): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045058.096:20358): table=filter family=2 entries=72 >type=SYSCALL msg=audit(1538045058.096:20358): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1272de0 items=0 ppid=470 pid=18186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045058.096:20358): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045058.128:20359): table=filter family=10 entries=49 >type=SYSCALL msg=audit(1538045058.128:20359): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=21a2b40 items=0 ppid=470 pid=18188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045058.128:20359): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045058.178:20360): table=filter family=2 entries=70 >type=SYSCALL msg=audit(1538045058.178:20360): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=12024c0 items=0 ppid=470 pid=18192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045058.178:20360): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045058.201:20361): table=filter family=10 entries=47 >type=SYSCALL msg=audit(1538045058.201:20361): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2381150 items=0 ppid=470 pid=18194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045058.201:20361): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045058.206:20362): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045058.206:20363): pid=18180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045058.367:20364): pid=18196 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045058.367:20365): pid=18196 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76646973706C6179202D2D6E6F68656164696E67202D43202D6F20417474722063696E6465722D766F6C756D65732F766F6C756D652D65313063306564652D326531612D343933312D623361632D646538393933656231333334 terminal=? res=success' >type=CRED_REFR msg=audit(1538045058.367:20366): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045058.386:20367): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045058.481:20368): pid=18201 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045058.482:20369): pid=18201 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F5F736E617073686F742D31626564663331312D386131662D343934622D396463352D643761623566343935343135 terminal=? res=success' >type=CRED_REFR msg=audit(1538045058.483:20370): pid=18201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045058.483:20371): dev=qg-9588a94d-d5 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045058.483:20371): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045058.483:20371): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_START msg=audit(1538045058.517:20372): pid=18201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045058.699:20373): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045058.699:20374): pid=18196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045058.834:20375): pid=18219 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045058.834:20376): pid=18219 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C7672656D6F7665202D2D636F6E6669672061637469766174696F6E207B2072657472795F646561637469766174696F6E203D20317D20202D662063696E6465722D766F6C756D65732F766F6C756D652D65313063306564652D326531612D343933312D623361632D646538393933656231333334 terminal=? res=success' >type=CRED_REFR msg=audit(1538045058.835:20377): pid=18219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045058.844:20378): pid=18219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045058.874:20379): pid=18201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045058.874:20380): pid=18201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045058.980:20381): pid=18227 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045058.980:20382): pid=18227 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C7672656D6F7665202D2D636F6E6669672061637469766174696F6E207B2072657472795F646561637469766174696F6E203D20317D20202D662063696E6465722D766F6C756D65732F5F736E617073686F742D31626564663331312D386131662D343934622D396463352D643761623566343935343135 terminal=? res=success' >type=CRED_REFR msg=audit(1538045058.981:20383): pid=18227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045059.000:20384): pid=18227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045059.187:20385): pid=18219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045059.187:20386): pid=18219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045059.345:20387): pid=18227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045059.345:20388): pid=18227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045059.417:20389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045059.725:20390): pid=18251 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045059.726:20391): pid=18251 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045059.727:20392): pid=18251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045059.753:20393): pid=18251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045060.070:20394): pid=18251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045060.070:20395): pid=18251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045060.201:20396): pid=18261 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045060.202:20397): pid=18261 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045060.202:20398): pid=18261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045060.224:20399): pid=18261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045060.567:20400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045060.567:20401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045060.569:20402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045060.595:20403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045060.787:20404): pid=18261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045060.787:20405): pid=18261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045060.958:20406): pid=18275 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045060.958:20407): pid=18275 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045060.958:20408): pid=18275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045060.980:20409): pid=18275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045061.073:20410): pid=18277 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045061.073:20411): pid=18277 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F766F6C756D652D30656361356439382D366438342D343536632D393061612D626336666434303834386163 terminal=? res=success' >type=CRED_REFR msg=audit(1538045061.073:20412): pid=18277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045061.093:20413): pid=18277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045061.343:20414): pid=18277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045061.343:20415): pid=18277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045061.456:20416): pid=18275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045061.456:20417): pid=18275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045061.507:20418): pid=18292 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045061.508:20419): pid=18292 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76646973706C6179202D2D6E6F68656164696E67202D43202D6F20417474722063696E6465722D766F6C756D65732F766F6C756D652D30656361356439382D366438342D343536632D393061612D626336666434303834386163 terminal=? res=success' >type=CRED_REFR msg=audit(1538045061.508:20420): pid=18292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045061.523:20421): pid=18292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045061.572:20422): pid=18297 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045061.572:20423): pid=18297 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045061.572:20424): pid=18297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045061.580:20425): pid=18297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045061.809:20426): pid=18297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045061.809:20427): pid=18297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045061.961:20428): pid=18292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045061.961:20429): pid=18292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045062.134:20430): pid=18311 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045062.135:20431): pid=18311 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C7672656D6F7665202D2D636F6E6669672061637469766174696F6E207B2072657472795F646561637469766174696F6E203D20317D20202D662063696E6465722D766F6C756D65732F766F6C756D652D30656361356439382D366438342D343536632D393061612D626336666434303834386163 terminal=? res=success' >type=CRED_REFR msg=audit(1538045062.135:20432): pid=18311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045062.153:20433): pid=18311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045062.815:20434): pid=18311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045062.815:20435): pid=18311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045063.237:20436): pid=18328 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045063.238:20437): pid=18328 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045063.238:20438): pid=18328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045063.282:20439): pid=18328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045063.892:20440): pid=18328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045063.892:20441): pid=18328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045064.065:20442): pid=18337 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045064.065:20443): pid=18337 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045064.065:20444): pid=18337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045064.087:20445): pid=18337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045064.643:20446): pid=18337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045064.643:20447): pid=18337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045064.785:20448): pid=18345 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045064.785:20449): pid=18345 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045064.786:20450): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045064.823:20451): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045065.045:20452): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045065.045:20453): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045065.181:20454): pid=18354 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045065.181:20455): pid=18354 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045065.181:20456): pid=18354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045065.198:20457): pid=18354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045065.364:20458): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045065.364:20458): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045065.364:20458): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045065.364:20458): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045065.364:20458): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045065.364:20458): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045065.364:20458): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045065.364:20458): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=18357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045065.364:20458): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538045065.628:20459): dev=qg-94a5aaff-4a prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045065.628:20459): arch=c000003e syscall=46 success=yes exit=76 a0=a2 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045065.628:20459): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=SERVICE_START msg=audit(1538045065.708:20460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045065.708:20461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045065.711:20462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045065.747:20463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045065.815:20464): pid=18354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045065.815:20465): pid=18354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045066.086:20466): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045066.086:20466): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045066.086:20466): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045066.086:20466): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045066.086:20466): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045066.086:20466): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045066.086:20466): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045066.086:20466): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f36cd592578 a2=0 a3=7ffdecffd9b0 items=0 ppid=8830 pid=18460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.086:20466): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=NETFILTER_CFG msg=audit(1538045066.131:20467): table=filter family=2 entries=68 >type=SYSCALL msg=audit(1538045066.131:20467): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9a9bd0 items=0 ppid=470 pid=18468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.131:20467): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.148:20468): table=filter family=10 entries=45 >type=SYSCALL msg=audit(1538045066.148:20468): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=13ea790 items=0 ppid=470 pid=18471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.148:20468): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.180:20469): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045066.180:20469): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=21527b0 items=0 ppid=8841 pid=18473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.180:20469): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.181:20470): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045066.181:20470): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=21548a0 items=0 ppid=8841 pid=18473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.181:20470): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.182:20471): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045066.182:20471): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2155f60 items=0 ppid=8841 pid=18473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.182:20471): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.182:20472): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045066.182:20472): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=21556b0 items=0 ppid=8841 pid=18473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.182:20472): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.231:20473): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538045066.231:20473): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=f55ad0 items=0 ppid=8841 pid=18476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.231:20473): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.232:20474): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538045066.232:20474): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=f56c50 items=0 ppid=8841 pid=18476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.232:20474): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.232:20475): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538045066.232:20475): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=f56c50 items=0 ppid=8841 pid=18476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.232:20475): proctitle=6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045066.298:20476): dev=tap8d634afd-7c prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045066.298:20476): arch=c000003e syscall=46 success=yes exit=76 a0=12 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.298:20476): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045066.362:20477): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538045066.362:20477): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=153fa60 items=0 ppid=8841 pid=18499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.362:20477): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.437:20478): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538045066.437:20478): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=227eba0 items=0 ppid=8841 pid=18512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.437:20478): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.438:20479): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538045066.438:20479): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2280af0 items=0 ppid=8841 pid=18512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.438:20479): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.438:20480): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1538045066.438:20480): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2280af0 items=0 ppid=8841 pid=18512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.438:20480): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.462:20481): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045066.462:20481): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f0d640 items=0 ppid=8795 pid=18515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.462:20481): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.465:20482): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045066.465:20482): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f0fd20 items=0 ppid=8795 pid=18515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.465:20482): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.465:20483): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045066.465:20483): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f10700 items=0 ppid=8795 pid=18515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.465:20483): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045066.465:20484): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045066.465:20484): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f0fd20 items=0 ppid=8795 pid=18515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045066.465:20484): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045068.205:20485): table=filter family=2 entries=70 >type=SYSCALL msg=audit(1538045068.205:20485): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=14594f0 items=0 ppid=470 pid=18543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045068.205:20485): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045068.231:20486): table=filter family=10 entries=47 >type=SYSCALL msg=audit(1538045068.231:20486): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=cc5180 items=0 ppid=470 pid=18546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045068.231:20486): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045069.097:20487): pid=18559 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045069.098:20488): pid=18559 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D7033557761655866356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D terminal=? res=success' >type=CRED_REFR msg=audit(1538045069.099:20489): pid=18559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045069.137:20490): pid=18559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045069.611:20491): pid=18559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045069.611:20492): pid=18559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045069.880:20493): pid=18569 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045069.880:20494): pid=18569 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D7033557761655866356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D terminal=? res=success' >type=CRED_REFR msg=audit(1538045069.880:20495): pid=18569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045069.897:20496): pid=18569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045070.416:20497): pid=18569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045070.417:20498): pid=18569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045070.546:20499): pid=18603 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045070.546:20500): pid=18603 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76637265617465202D54202D56203167202D6E20766F6C756D652D32353061316133652D306538342D343039302D613966372D3837363531643561356138312063696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045070.547:20501): pid=18603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045070.567:20502): pid=18603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045070.817:20503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045070.817:20504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045070.821:20505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045070.843:20506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045070.916:20507): pid=18603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045070.917:20508): pid=18603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045071.282:20509): pid=18744 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045071.282:20510): pid=18744 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D70746572316468 terminal=? res=success' >type=CRED_REFR msg=audit(1538045071.282:20511): pid=18744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045071.327:20512): pid=18744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045071.770:20513): pid=18744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045071.770:20514): pid=18744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045072.002:20515): pid=18861 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045072.002:20516): pid=18861 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D7033557761655866356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D terminal=? res=success' >type=CRED_REFR msg=audit(1538045072.003:20517): pid=18861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045072.057:20518): pid=18861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045072.649:20519): pid=18861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045072.649:20520): pid=18861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045072.823:20521): pid=19040 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045072.823:20522): pid=19040 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620646420636F756E743D302069663D2F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D7033557761655866356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D206F663D2F6465762F6D61707065722F63696E6465722D2D766F6C756D65732D766F6C756D652D2D32353061316133652D2D306538342D2D343039302D2D613966372D2D383736353164356135613831206F666C61673D646972656374 terminal=? res=success' >type=CRED_REFR msg=audit(1538045072.823:20523): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045072.847:20524): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045073.350:20525): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045073.350:20526): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045073.497:20527): pid=19161 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045073.498:20528): pid=19161 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662071656D752D696D6720636F6E76657274202D4F20726177202D74206E6F6E65202D662071636F7732202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D7033557761655866356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D202F6465762F6D61707065722F63696E6465722D2D766F6C756D65732D766F6C756D652D2D32353061316133652D2D306538342D2D343039302D2D613966372D2D383736353164356135613831 terminal=? res=success' >type=CRED_REFR msg=audit(1538045073.498:20529): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045073.522:20530): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045073.686:20531): dev=qr-dc6d28aa-bc prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045073.686:20531): arch=c000003e syscall=46 success=yes exit=76 a0=12 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045073.686:20531): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045074.140:20532): table=filter family=2 entries=72 >type=SYSCALL msg=audit(1538045074.140:20532): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1787e10 items=0 ppid=470 pid=19213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045074.140:20532): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045074.169:20533): table=filter family=10 entries=49 >type=SYSCALL msg=audit(1538045074.169:20533): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=962b70 items=0 ppid=470 pid=19217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045074.169:20533): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045074.409:20534): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045074.409:20535): pid=19161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045074.520:20536): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045074.520:20536): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=25a0050 items=0 ppid=8841 pid=19231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045074.520:20536): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045074.653:20537): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538045074.653:20537): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=25023e0 items=0 ppid=8841 pid=19236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045074.653:20537): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045074.654:20538): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538045074.654:20538): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2503980 items=0 ppid=8841 pid=19236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045074.654:20538): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045074.668:20539): pid=19229 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045074.668:20540): pid=19229 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D432071656D752D696D6720696E666F202F7661722F6C69622F63696E6465722F636F6E76657273696F6E2F746D7033557761655866356465643830306532356261363631316236363930613066316635386563612D61696F2D30406C766D terminal=? res=success' >type=CRED_REFR msg=audit(1538045074.668:20541): pid=19229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045074.704:20542): pid=19229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045075.282:20543): pid=19229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045075.282:20544): pid=19229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045076.001:20545): pid=19247 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045076.001:20546): pid=19247 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045076.001:20547): pid=19247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045076.006:20548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045076.006:20549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045076.009:20550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045076.045:20551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538045076.049:20552): pid=19247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045076.628:20553): pid=19247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045076.628:20554): pid=19247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045076.811:20555): pid=19267 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045076.812:20556): pid=19267 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045076.812:20557): pid=19267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045076.841:20558): pid=19267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045077.405:20559): pid=19267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045077.406:20560): pid=19267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045077.588:20561): pid=19276 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045077.588:20562): pid=19276 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045077.588:20563): pid=19276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045077.622:20564): pid=19276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045078.200:20565): pid=19276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045078.200:20566): pid=19276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045078.350:20567): pid=19285 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045078.351:20568): pid=19285 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045078.351:20569): pid=19285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045078.408:20570): pid=19285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045078.781:20571): pid=19285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045078.781:20572): pid=19285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045081.067:20573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045081.067:20574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045081.071:20575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045081.109:20576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045081.407:20577): pid=19321 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045081.407:20578): pid=19321 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D4B2063696E6465722D766F6C756D65732F766F6C756D652D32353061316133652D306538342D343039302D613966372D383736353164356135613831 terminal=? res=success' >type=CRED_REFR msg=audit(1538045081.408:20579): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045081.479:20580): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045082.055:20581): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045082.055:20582): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045082.342:20583): pid=19334 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045082.342:20584): pid=19334 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C20637265617465202F6465762F63696E6465722D766F6C756D65732F766F6C756D652D32353061316133652D306538342D343039302D613966372D3837363531643561356138312069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D32353061316133652D306538342D343039302D613966372D38373635316435613561383120346A476F36394A65793261785454514853354E6720646A69644E3537685A705A5A7169436A2046616C7365202D7033323630202D613137322E31362E312E3133 terminal=? res=success' >type=CRED_REFR msg=audit(1538045082.343:20585): pid=19334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045082.363:20586): pid=19334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045083.462:20587): pid=19334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045083.462:20588): pid=19334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045083.607:20589): pid=19361 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045083.608:20590): pid=19361 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045083.608:20591): pid=19361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045083.627:20592): pid=19361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045084.312:20593): dev=qvb5962d1de-f4 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045084.312:20593): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7fff02fbb050 a2=0 a3=7fff02fbaa60 items=0 ppid=10687 pid=19403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045084.312:20593): proctitle=6970006C696E6B007365740071766235393632643164652D66340070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045084.366:20594): dev=qvo5962d1de-f4 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045084.366:20594): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffe5b2fd5d0 a2=0 a3=7ffe5b2fcfe0 items=0 ppid=10687 pid=19417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045084.366:20594): proctitle=6970006C696E6B007365740071766F35393632643164652D66340070726F6D697363006F6E >type=SERVICE_START msg=audit(1538045084.537:20595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045084.874:20596): pid=19361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045084.874:20597): pid=19361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045084.940:20598): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 vm-ctx=system_u:system_r:svirt_t:s0:c117,c473 img-ctx=system_u:object_r:svirt_image_t:s0:c117,c473 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045084.940:20599): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045084.960:20600): dev=tap5962d1de-f4 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045084.960:20600): arch=c000003e syscall=16 success=yes exit=0 a0=53 a1=89a2 a2=7f20e5c81f60 a3=53202d2034393a64 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045084.960:20600): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045085.007:20601): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 net=fa:16:3e:c1:9d:94 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.007:20602): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 net=fa:16:3e:c1:9d:94 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.076:20603): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d11\x2dinstance\x2d0000000a.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.078:20604): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d11\x2dinstance\x2d0000000a.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.078:20605): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d11\x2dinstance\x2d0000000a.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.078:20606): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d11\x2dinstance\x2d0000000a.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.078:20607): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d11\x2dinstance\x2d0000000a.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.078:20608): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d11\x2dinstance\x2d0000000a.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.079:20609): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d11\x2dinstance\x2d0000000a.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.079:20610): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d11\x2dinstance\x2d0000000a.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.079:20611): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d11\x2dinstance\x2d0000000a.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.079:20612): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d11\x2dinstance\x2d0000000a.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.079:20613): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d11\x2dinstance\x2d0000000a.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045085.109:20614): pid=19476 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045085.110:20615): pid=19476 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045085.110:20616): pid=19476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045085.137:20617): pid=19476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.345:20618): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 old-disk="?" new-disk="/var/lib/nova/instances/588a9c8b-6ffc-4c39-a432-1d0006b5d039/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.345:20619): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 old-net="?" new-net="fa:16:3e:c1:9d:94" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.345:20620): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 old-chardev="?" new-chardev="/dev/pts/1" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.345:20621): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045085.345:20622): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045085.345:20623): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 vm-pid=19499 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045086.122:20624): pid=19476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045086.122:20625): pid=19476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045086.124:20626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045086.124:20627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045086.128:20628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045086.167:20629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045086.308:20630): table=filter family=2 entries=74 >type=SYSCALL msg=audit(1538045086.308:20630): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1511e20 items=0 ppid=470 pid=19582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045086.308:20630): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045086.309:20631): table=raw family=2 entries=9 >type=SYSCALL msg=audit(1538045086.309:20631): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=14fc010 items=0 ppid=470 pid=19582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045086.309:20631): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045086.347:20632): table=filter family=10 entries=51 >type=SYSCALL msg=audit(1538045086.347:20632): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=236e090 items=0 ppid=470 pid=19585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045086.347:20632): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045086.348:20633): table=raw family=10 entries=9 >type=SYSCALL msg=audit(1538045086.348:20633): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=235d010 items=0 ppid=470 pid=19585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045086.348:20633): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045086.391:20634): pid=19579 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045086.391:20635): pid=19579 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206164642D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D32353061316133652D306538342D343039302D613966372D38373635316435613561383120346A476F36394A65793261785454514853354E6720646A69644E3537685A705A5A7169436A2069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538045086.391:20636): pid=19579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045086.422:20637): pid=19579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045087.460:20638): pid=19579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045087.460:20639): pid=19579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045087.614:20640): pid=19602 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045087.615:20641): pid=19602 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045087.615:20642): pid=19602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045087.636:20643): pid=19602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045088.609:20644): pid=19602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045088.609:20645): pid=19602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045091.318:20646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045091.318:20647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045091.321:20648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045091.353:20649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045094.445:20650): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045094.445:20650): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=172ce50 items=0 ppid=8841 pid=19693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045094.445:20650): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045094.753:20651): dev=qvb5d5b83b8-64 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045094.753:20651): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffe2cd500e0 a2=0 a3=7ffe2cd4fb20 items=0 ppid=10687 pid=19737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045094.753:20651): proctitle=6970006C696E6B007365740071766235643562383362382D36340070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045094.796:20652): dev=qvo5d5b83b8-64 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045094.796:20652): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffc43444110 a2=0 a3=7ffc43443b20 items=0 ppid=10687 pid=19750 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045094.796:20652): proctitle=6970006C696E6B007365740071766F35643562383362382D36340070726F6D697363006F6E >type=VIRT_MACHINE_ID msg=audit(1538045095.273:20653): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 vm-ctx=system_u:system_r:svirt_t:s0:c634,c815 img-ctx=system_u:object_r:svirt_image_t:s0:c634,c815 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045095.273:20654): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045095.297:20655): dev=tap5d5b83b8-64 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045095.297:20655): arch=c000003e syscall=16 success=yes exit=0 a0=54 a1=89a2 a2=7f20e6482f60 a3=53202d2065633a37 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045095.297:20655): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045095.343:20656): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 net=fa:16:3e:b6:c7:ce path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.343:20657): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 net=fa:16:3e:b6:c7:ce path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.430:20658): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d12\x2dinstance\x2d0000000b.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.431:20659): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d12\x2dinstance\x2d0000000b.scope/" class=path path="/dev/sda" rdev=08:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.431:20660): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d12\x2dinstance\x2d0000000b.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.431:20661): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d12\x2dinstance\x2d0000000b.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.431:20662): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d12\x2dinstance\x2d0000000b.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.432:20663): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d12\x2dinstance\x2d0000000b.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.432:20664): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d12\x2dinstance\x2d0000000b.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.432:20665): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d12\x2dinstance\x2d0000000b.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.432:20666): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d12\x2dinstance\x2d0000000b.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.432:20667): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d12\x2dinstance\x2d0000000b.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.433:20668): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d12\x2dinstance\x2d0000000b.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.433:20669): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d12\x2dinstance\x2d0000000b.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.767:20670): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 old-disk="?" new-disk="/dev/sda" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.768:20671): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 old-net="?" new-net="fa:16:3e:b6:c7:ce" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.768:20672): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 old-chardev="?" new-chardev="/dev/pts/2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.768:20673): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045095.768:20674): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045095.768:20675): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 vm-pid=19815 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045096.283:20676): table=filter family=2 entries=104 >type=SYSCALL msg=audit(1538045096.283:20676): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8b06e0 items=0 ppid=470 pid=19857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045096.283:20676): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045096.284:20677): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538045096.284:20677): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8957e0 items=0 ppid=470 pid=19857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045096.284:20677): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045096.318:20678): table=filter family=10 entries=80 >type=SYSCALL msg=audit(1538045096.318:20678): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=139c9f0 items=0 ppid=470 pid=19859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045096.318:20678): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045096.319:20679): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538045096.319:20679): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1385570 items=0 ppid=470 pid=19859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045096.319:20679): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045096.572:20680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045096.572:20681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045096.576:20682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045096.607:20683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045101.383:20684): pid=19882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045101.384:20685): pid=19882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045101.385:20686): pid=19882 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=430 res=1 >type=USER_START msg=audit(1538045101.416:20687): pid=19882 uid=0 auid=163 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045101.417:20688): pid=19882 uid=0 auid=163 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045101.817:20689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045101.817:20690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045101.820:20691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045101.838:20692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRED_DISP msg=audit(1538045103.682:20693): pid=19882 uid=0 auid=163 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045103.688:20694): pid=19882 uid=0 auid=163 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_STOP msg=audit(1538045105.409:20695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045107.072:20696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045107.072:20697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045107.074:20698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045107.090:20699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045107.372:20700): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045107.372:20700): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=179ce50 items=0 ppid=8841 pid=19928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045107.372:20700): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045112.317:20701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045112.318:20702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045112.319:20703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045112.332:20704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045117.567:20705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045117.567:20706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045117.568:20707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045117.581:20708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045122.817:20709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045122.817:20710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045122.820:20711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045122.832:20712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045128.069:20713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045128.069:20714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045128.072:20715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045128.082:20716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045133.318:20717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045133.318:20718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045133.321:20719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045133.331:20720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045135.985:20721): pid=20316 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045135.986:20722): pid=20316 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045135.986:20723): pid=20316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045136.016:20724): pid=20316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045136.656:20725): pid=20316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045136.656:20726): pid=20316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045136.767:20727): pid=20329 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045136.767:20728): pid=20329 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045136.768:20729): pid=20329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045136.785:20730): pid=20329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045137.075:20731): pid=20329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045137.075:20732): pid=20329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045137.200:20733): pid=20340 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045137.200:20734): pid=20340 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045137.200:20735): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045137.215:20736): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045137.489:20737): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045137.489:20738): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045137.598:20739): pid=20354 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045137.598:20740): pid=20354 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045137.598:20741): pid=20354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045137.622:20742): pid=20354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045138.142:20743): pid=20354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045138.143:20744): pid=20354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045138.567:20745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045138.567:20746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045138.568:20747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045138.587:20748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045141.400:20749): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045141.400:20749): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1fdbc40 items=0 ppid=8841 pid=20383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045141.400:20749): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045143.156:20750): dev=tap5d5b83b8-64 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SERVICE_START msg=audit(1538045143.195:20751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045143.344:20752): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-0000000b" uuid=5ee80157-1b4b-41ed-8040-3ad8ca639e74 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045143.622:20753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045143.622:20754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045143.626:20755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045143.641:20756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045144.269:20757): table=filter family=2 entries=132 >type=SYSCALL msg=audit(1538045144.269:20757): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=21a8870 items=0 ppid=470 pid=20483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045144.269:20757): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045144.269:20758): table=raw family=2 entries=15 >type=SYSCALL msg=audit(1538045144.269:20758): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2191080 items=0 ppid=470 pid=20483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045144.269:20758): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045144.301:20759): table=filter family=10 entries=107 >type=SYSCALL msg=audit(1538045144.301:20759): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=128d690 items=0 ppid=470 pid=20485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045144.301:20759): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045144.301:20760): table=raw family=10 entries=15 >type=SYSCALL msg=audit(1538045144.301:20760): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1279530 items=0 ppid=470 pid=20485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045144.301:20760): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045147.266:20761): pid=20499 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045147.267:20762): pid=20499 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D32353061316133652D306538342D343039302D613966372D3837363531643561356138312069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538045147.267:20763): pid=20499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045147.317:20764): pid=20499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045148.099:20765): pid=20499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045148.099:20766): pid=20499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045148.265:20767): pid=20516 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045148.265:20768): pid=20516 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045148.266:20769): pid=20516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045148.288:20770): pid=20516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045148.348:20771): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045148.348:20771): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=23d9c40 items=0 ppid=8841 pid=20523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045148.348:20771): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045148.698:20772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045148.698:20773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045148.700:20774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045148.702:20775): pid=20516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045148.702:20776): pid=20516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045148.731:20777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045148.884:20778): pid=20546 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045148.885:20779): pid=20546 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045148.885:20780): pid=20546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045148.898:20781): pid=20546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045149.565:20782): pid=20546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045149.565:20783): pid=20546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045149.697:20784): pid=20562 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045149.698:20785): pid=20562 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D32353061316133652D306538342D343039302D613966372D383736353164356135613831 terminal=? res=success' >type=CRED_REFR msg=audit(1538045149.698:20786): pid=20562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045149.716:20787): pid=20562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045150.629:20788): pid=20562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045150.629:20789): pid=20562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045150.768:20790): pid=20578 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045150.768:20791): pid=20578 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045150.769:20792): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045150.783:20793): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045151.237:20794): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045151.237:20795): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045153.411:20796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045153.818:20797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045153.819:20798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045153.822:20799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045153.837:20800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045157.533:20801): dev=qvbcfc36c44-0e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045157.533:20801): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffe27333870 a2=0 a3=7ffe273332a0 items=0 ppid=10687 pid=20694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045157.533:20801): proctitle=6970006C696E6B007365740071766263666333366334342D30650070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045157.574:20802): dev=qvocfc36c44-0e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045157.574:20802): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffd4a2b5090 a2=0 a3=7ffd4a2b4aa0 items=0 ppid=10687 pid=20702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045157.574:20802): proctitle=6970006C696E6B007365740071766F63666333366334342D30650070726F6D697363006F6E >type=SERVICE_START msg=audit(1538045157.705:20803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045157.998:20804): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef vm-ctx=system_u:system_r:svirt_t:s0:c520,c749 img-ctx=system_u:object_r:svirt_image_t:s0:c520,c749 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045157.998:20805): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045158.015:20806): dev=tapcfc36c44-0e prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045158.015:20806): arch=c000003e syscall=16 success=yes exit=0 a0=54 a1=89a2 a2=7f20e447ef60 a3=53202d2036613a64 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045158.015:20806): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045158.059:20807): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef net=fa:16:3e:23:cd:a6 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.059:20808): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef net=fa:16:3e:23:cd:a6 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.122:20809): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d13\x2dinstance\x2d0000000c.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.122:20810): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d13\x2dinstance\x2d0000000c.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.123:20811): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d13\x2dinstance\x2d0000000c.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.123:20812): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d13\x2dinstance\x2d0000000c.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.123:20813): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d13\x2dinstance\x2d0000000c.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.123:20814): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d13\x2dinstance\x2d0000000c.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.123:20815): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d13\x2dinstance\x2d0000000c.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.123:20816): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d13\x2dinstance\x2d0000000c.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.123:20817): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d13\x2dinstance\x2d0000000c.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.123:20818): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d13\x2dinstance\x2d0000000c.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.123:20819): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d13\x2dinstance\x2d0000000c.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045158.295:20820): pid=20782 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045158.296:20821): pid=20782 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D4B2063696E6465722D766F6C756D65732F766F6C756D652D32353061316133652D306538342D343039302D613966372D383736353164356135613831 terminal=? res=success' >type=CRED_REFR msg=audit(1538045158.296:20822): pid=20782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045158.323:20823): pid=20782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.390:20824): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef old-disk="?" new-disk="/var/lib/nova/instances/a6befd08-c006-4be6-af35-21457e4499ef/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.391:20825): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef old-net="?" new-net="fa:16:3e:23:cd:a6" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.391:20826): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef old-chardev="?" new-chardev="/dev/pts/2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.391:20827): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045158.391:20828): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045158.391:20829): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef vm-pid=20776 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045158.393:20830): table=filter family=2 entries=104 >type=SYSCALL msg=audit(1538045158.393:20830): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=6afa00 items=0 ppid=470 pid=20811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045158.393:20830): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045158.394:20831): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538045158.394:20831): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=694f50 items=0 ppid=470 pid=20811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045158.394:20831): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045158.439:20832): table=filter family=10 entries=80 >type=SYSCALL msg=audit(1538045158.439:20832): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1ee9af0 items=0 ppid=470 pid=20814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045158.439:20832): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045158.440:20833): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538045158.440:20833): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1ed4340 items=0 ppid=470 pid=20814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045158.440:20833): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045158.639:20834): pid=20782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045158.639:20835): pid=20782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045158.880:20836): pid=20820 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045158.881:20837): pid=20820 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C20637265617465202F6465762F63696E6465722D766F6C756D65732F766F6C756D652D32353061316133652D306538342D343039302D613966372D3837363531643561356138312069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D32353061316133652D306538342D343039302D613966372D38373635316435613561383120346A476F36394A65793261785454514853354E6720646A69644E3537685A705A5A7169436A2046616C7365202D7033323630202D613137322E31362E312E3133 terminal=? res=success' >type=CRED_REFR msg=audit(1538045158.881:20838): pid=20820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045158.888:20839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045158.888:20840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045158.889:20841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045158.927:20842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538045158.933:20843): pid=20820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045160.156:20844): pid=20820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045160.156:20845): pid=20820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045160.326:20846): pid=20847 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045160.326:20847): pid=20847 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045160.326:20848): pid=20847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045160.366:20849): pid=20847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045161.305:20850): pid=20847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045161.305:20851): pid=20847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045161.456:20852): pid=20870 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045161.456:20853): pid=20870 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045161.456:20854): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045161.468:20855): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045161.714:20856): pid=20873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045161.714:20857): pid=20873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045161.715:20858): pid=20873 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=431 res=1 >type=USER_START msg=audit(1538045161.748:20859): pid=20873 uid=0 auid=163 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045161.749:20860): pid=20873 uid=0 auid=163 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045162.309:20861): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045162.309:20862): pid=20870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045162.440:20863): pid=20910 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045162.441:20864): pid=20910 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206164642D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D32353061316133652D306538342D343039302D613966372D38373635316435613561383120346A476F36394A65793261785454514853354E6720646A69644E3537685A705A5A7169436A2069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538045162.441:20865): pid=20910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045162.453:20866): pid=20910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045162.987:20867): pid=20910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045162.988:20868): pid=20910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045163.153:20869): pid=20931 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045163.154:20870): pid=20931 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045163.155:20871): pid=20931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045163.197:20872): pid=20931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045163.660:20873): pid=20931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045163.660:20874): pid=20931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045163.891:20875): pid=20873 uid=0 auid=163 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045163.895:20876): pid=20873 uid=0 auid=163 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045164.068:20877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045164.068:20878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045164.070:20879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045164.108:20880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045166.222:20881): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045166.222:20881): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8d7e50 items=0 ppid=8841 pid=21027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045166.222:20881): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045166.846:20882): dev=qvb0cc5faf6-12 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045166.846:20882): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7fff3111bda0 a2=0 a3=7fff3111b7e0 items=0 ppid=10687 pid=21076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045166.846:20882): proctitle=6970006C696E6B007365740071766230636335666166362D31320070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045166.882:20883): dev=qvo0cc5faf6-12 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045166.882:20883): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffcfff5f330 a2=0 a3=7ffcfff5ed60 items=0 ppid=10687 pid=21079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045166.882:20883): proctitle=6970006C696E6B007365740071766F30636335666166362D31320070726F6D697363006F6E >type=VIRT_MACHINE_ID msg=audit(1538045167.179:20884): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 vm-ctx=system_u:system_r:svirt_t:s0:c289,c688 img-ctx=system_u:object_r:svirt_image_t:s0:c289,c688 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045167.179:20885): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045167.189:20886): dev=tap0cc5faf6-12 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045167.189:20886): arch=c000003e syscall=16 success=yes exit=0 a0=55 a1=89a2 a2=7f20e5c81f60 a3=53202d2035383a65 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045167.189:20886): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045167.212:20887): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 net=fa:16:3e:1c:8e:85 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.212:20888): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 net=fa:16:3e:1c:8e:85 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.288:20889): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d14\x2dinstance\x2d0000000d.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.288:20890): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d14\x2dinstance\x2d0000000d.scope/" class=path path="/dev/sda" rdev=08:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.289:20891): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d14\x2dinstance\x2d0000000d.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.289:20892): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d14\x2dinstance\x2d0000000d.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.289:20893): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d14\x2dinstance\x2d0000000d.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.289:20894): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d14\x2dinstance\x2d0000000d.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.290:20895): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d14\x2dinstance\x2d0000000d.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.290:20896): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d14\x2dinstance\x2d0000000d.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.290:20897): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d14\x2dinstance\x2d0000000d.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.290:20898): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d14\x2dinstance\x2d0000000d.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.290:20899): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d14\x2dinstance\x2d0000000d.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.290:20900): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d14\x2dinstance\x2d0000000d.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.574:20901): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 old-disk="?" new-disk="/dev/sda" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.574:20902): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 old-net="?" new-net="fa:16:3e:1c:8e:85" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.574:20903): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 old-chardev="?" new-chardev="/dev/pts/3" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.574:20904): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045167.574:20905): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045167.574:20906): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 vm-pid=21145 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045168.269:20907): table=filter family=2 entries=134 >type=SYSCALL msg=audit(1538045168.269:20907): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=17df320 items=0 ppid=470 pid=21184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045168.269:20907): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045168.269:20908): table=raw family=2 entries=15 >type=SYSCALL msg=audit(1538045168.269:20908): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=17befa0 items=0 ppid=470 pid=21184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045168.269:20908): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045168.301:20909): table=filter family=10 entries=109 >type=SYSCALL msg=audit(1538045168.301:20909): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=e43570 items=0 ppid=470 pid=21186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045168.301:20909): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045168.301:20910): table=raw family=10 entries=15 >type=SYSCALL msg=audit(1538045168.301:20910): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=e27aa0 items=0 ppid=470 pid=21186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045168.301:20910): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045169.319:20911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045169.319:20912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045169.322:20913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045169.351:20914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045174.567:20915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045174.567:20916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045174.569:20917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045174.585:20918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_STOP msg=audit(1538045177.416:20919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045177.604:20920): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045177.604:20920): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=119ce50 items=0 ppid=8841 pid=21235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045177.604:20920): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045179.817:20921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045179.817:20922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045179.820:20923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045179.832:20924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045185.067:20925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045185.067:20926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045185.068:20927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045185.077:20928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045190.317:20929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045190.317:20930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045190.318:20931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045190.328:20932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045195.567:20933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045195.567:20934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045195.571:20935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045195.578:20936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045196.084:20937): pid=21606 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045196.085:20938): pid=21606 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045196.085:20939): pid=21606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045196.121:20940): pid=21606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045196.657:20941): pid=21606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045196.657:20942): pid=21606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045196.759:20943): pid=21616 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045196.759:20944): pid=21616 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045196.760:20945): pid=21616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045196.771:20946): pid=21616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045197.006:20947): pid=21616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045197.006:20948): pid=21616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045197.123:20949): pid=21625 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045197.124:20950): pid=21625 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045197.124:20951): pid=21625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045197.144:20952): pid=21625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045197.670:20953): pid=21625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045197.670:20954): pid=21625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045197.842:20955): pid=21635 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045197.842:20956): pid=21635 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045197.842:20957): pid=21635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045197.863:20958): pid=21635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045198.301:20959): pid=21635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045198.302:20960): pid=21635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045200.817:20961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045200.817:20962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045200.826:20963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045200.839:20964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045206.071:20965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045206.071:20966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045206.094:20967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045206.125:20968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045210.210:20969): dev=tapcfc36c44-0e prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SERVICE_START msg=audit(1538045210.263:20970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045210.399:20971): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-0000000c" uuid=a6befd08-c006-4be6-af35-21457e4499ef vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045211.319:20972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045211.319:20973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045211.322:20974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045211.343:20975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045212.299:20976): table=filter family=2 entries=162 >type=SYSCALL msg=audit(1538045212.299:20976): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=dcd2d0 items=0 ppid=470 pid=21753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045212.299:20976): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045212.299:20977): table=raw family=2 entries=18 >type=SYSCALL msg=audit(1538045212.299:20977): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=db0ee0 items=0 ppid=470 pid=21753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045212.299:20977): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045212.324:20978): table=filter family=10 entries=136 >type=SYSCALL msg=audit(1538045212.324:20978): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1bf6130 items=0 ppid=470 pid=21755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045212.324:20978): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045212.324:20979): table=raw family=10 entries=18 >type=SYSCALL msg=audit(1538045212.324:20979): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1bdc4d0 items=0 ppid=470 pid=21755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045212.324:20979): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045214.744:20980): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045214.744:20980): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1fd2c40 items=0 ppid=8841 pid=21776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045214.744:20980): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045215.197:20981): dev=tap5962d1de-f4 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1538045215.394:20982): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-0000000a" uuid=588a9c8b-6ffc-4c39-a432-1d0006b5d039 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045216.357:20983): table=filter family=2 entries=132 >type=SYSCALL msg=audit(1538045216.357:20983): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=23b1870 items=0 ppid=470 pid=21854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045216.357:20983): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045216.358:20984): table=raw family=2 entries=15 >type=SYSCALL msg=audit(1538045216.358:20984): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=239a080 items=0 ppid=470 pid=21854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045216.358:20984): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045216.393:20985): table=filter family=10 entries=107 >type=SYSCALL msg=audit(1538045216.393:20985): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=a1d690 items=0 ppid=470 pid=21859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045216.393:20985): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045216.393:20986): table=raw family=10 entries=15 >type=SYSCALL msg=audit(1538045216.393:20986): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=a09530 items=0 ppid=470 pid=21859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045216.393:20986): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045216.572:20987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045216.572:20988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045216.578:20989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045216.609:20990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045220.181:20991): table=filter family=2 entries=102 >type=SYSCALL msg=audit(1538045220.181:20991): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=183ae10 items=0 ppid=470 pid=21882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045220.181:20991): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045220.203:20992): table=filter family=10 entries=78 >type=SYSCALL msg=audit(1538045220.203:20992): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1018bf0 items=0 ppid=470 pid=21884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045220.203:20992): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045221.647:20993): dev=qr-dc6d28aa-bc prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045221.647:20993): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045221.647:20993): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=SERVICE_START msg=audit(1538045221.818:20994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045221.818:20995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045221.820:20996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045221.834:20997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045221.884:20998): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538045221.884:20998): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1938fd0 items=0 ppid=8841 pid=21900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045221.884:20998): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045221.884:20999): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045221.884:20999): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1939ff0 items=0 ppid=8841 pid=21900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045221.884:20999): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045221.920:21000): pid=21902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045221.920:21001): pid=21902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045221.921:21002): pid=21902 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=432 res=1 >type=USER_START msg=audit(1538045221.951:21003): pid=21902 uid=0 auid=163 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045221.951:21004): pid=21902 uid=0 auid=163 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045222.687:21005): dev=tap8d634afd-7c prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045222.687:21005): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045222.687:21005): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538045224.020:21006): dev=qg-94a5aaff-4a prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045224.020:21006): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045224.020:21006): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045224.247:21007): table=filter family=2 entries=100 >type=SYSCALL msg=audit(1538045224.247:21007): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7b24f0 items=0 ppid=470 pid=21942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045224.247:21007): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045224.273:21008): table=filter family=10 entries=76 >type=SYSCALL msg=audit(1538045224.273:21008): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1b4e200 items=0 ppid=470 pid=21944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045224.273:21008): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045224.460:21009): pid=21945 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045224.461:21010): pid=21945 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F766F6C756D652D32353061316133652D306538342D343039302D613966372D383736353164356135613831 terminal=? res=success' >type=CRED_REFR msg=audit(1538045224.461:21011): pid=21945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045224.491:21012): pid=21945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045224.795:21013): pid=21902 uid=0 auid=163 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045224.800:21014): pid=21902 uid=0 auid=163 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045224.868:21015): pid=21945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045224.869:21016): pid=21945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045225.038:21017): pid=21956 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045225.039:21018): pid=21956 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76637265617465202D2D6E616D65205F736E617073686F742D65613238643863312D303931622D343232342D623535312D306234663264326465666434202D2D736E617073686F742063696E6465722D766F6C756D65732F766F6C756D652D32353061316133652D306538342D343039302D613966372D383736353164356135613831 terminal=? res=success' >type=CRED_REFR msg=audit(1538045225.039:21019): pid=21956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045225.069:21020): pid=21956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045225.441:21021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045225.551:21022): pid=21956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045225.551:21023): pid=21956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045227.066:21024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045227.067:21025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045227.068:21026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045227.086:21027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045227.436:21028): pid=21979 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045227.436:21029): pid=21979 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F5F736E617073686F742D65613238643863312D303931622D343232342D623535312D306234663264326465666434 terminal=? res=success' >type=CRED_REFR msg=audit(1538045227.436:21030): pid=21979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045227.469:21031): pid=21979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045228.024:21032): pid=21979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045228.024:21033): pid=21979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045228.191:21034): pid=21989 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045228.192:21035): pid=21989 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76637265617465202D2D6E616D6520766F6C756D652D33373838643636632D616631642D343239372D613630662D613736383935363030383238202D2D736E617073686F742063696E6465722D766F6C756D65732F5F736E617073686F742D65613238643863312D303931622D343232342D623535312D306234663264326465666434 terminal=? res=success' >type=CRED_REFR msg=audit(1538045228.192:21036): pid=21989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045228.212:21037): pid=21989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045228.826:21038): pid=21989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045228.826:21039): pid=21989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045228.987:21040): pid=21999 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045228.987:21041): pid=21999 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D4B2063696E6465722D766F6C756D65732F5F736E617073686F742D65613238643863312D303931622D343232342D623535312D306234663264326465666434 terminal=? res=success' >type=CRED_REFR msg=audit(1538045228.987:21042): pid=21999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045229.011:21043): pid=21999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045229.617:21044): pid=21999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045229.617:21045): pid=21999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045229.775:21046): pid=22017 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045229.776:21047): pid=22017 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D6B206E2063696E6465722D766F6C756D65732F766F6C756D652D33373838643636632D616631642D343239372D613630662D613736383935363030383238 terminal=? res=success' >type=CRED_REFR msg=audit(1538045229.776:21048): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045229.793:21049): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045230.049:21050): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045230.049:21051): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045231.074:21052): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045231.074:21052): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045231.074:21052): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045231.074:21052): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045231.074:21052): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045231.074:21052): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045231.074:21052): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045231.074:21052): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=22037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045231.074:21052): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538045231.346:21053): dev=qg-cf365295-11 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045231.346:21053): arch=c000003e syscall=46 success=yes exit=76 a0=12 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045231.346:21053): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045231.838:21054): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045231.838:21054): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10bd7b0 items=0 ppid=8841 pid=22121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045231.838:21054): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045231.839:21055): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045231.839:21055): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10bf8a0 items=0 ppid=8841 pid=22121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045231.839:21055): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045231.840:21056): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045231.840:21056): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10c0f60 items=0 ppid=8841 pid=22121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045231.840:21056): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045231.840:21057): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045231.840:21057): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10c06b0 items=0 ppid=8841 pid=22121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045231.840:21057): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045231.905:21058): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538045231.905:21058): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=c24ad0 items=0 ppid=8841 pid=22123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045231.905:21058): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045231.906:21059): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538045231.906:21059): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=c25c50 items=0 ppid=8841 pid=22123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045231.906:21059): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045231.907:21060): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538045231.907:21060): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=c25c50 items=0 ppid=8841 pid=22123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045231.907:21060): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045231.996:21061): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538045231.996:21061): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=15b4a60 items=0 ppid=8841 pid=22126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045231.996:21061): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045232.093:21062): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538045232.093:21062): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1996ba0 items=0 ppid=8841 pid=22129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045232.093:21062): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045232.094:21063): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538045232.094:21063): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1998af0 items=0 ppid=8841 pid=22129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045232.094:21063): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045232.094:21064): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1538045232.094:21064): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1998af0 items=0 ppid=8841 pid=22129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045232.094:21064): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045232.210:21065): table=filter family=2 entries=96 >type=SYSCALL msg=audit(1538045232.210:21065): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=17ec2e0 items=0 ppid=470 pid=22134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045232.210:21065): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045232.231:21066): table=filter family=10 entries=72 >type=SYSCALL msg=audit(1538045232.231:21066): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1b48e50 items=0 ppid=470 pid=22136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045232.231:21066): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045232.320:21067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045232.320:21068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045232.324:21069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045232.352:21070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045232.581:21071): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045232.581:21071): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045232.581:21071): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045232.581:21071): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045232.581:21071): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045232.581:21071): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045232.581:21071): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045232.581:21071): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f36cd592578 a2=0 a3=7ffdecffd9b0 items=0 ppid=8830 pid=22147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045232.581:21071): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538045232.808:21072): dev=tapd59b96b5-35 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045232.808:21072): arch=c000003e syscall=46 success=yes exit=76 a0=a2 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045232.808:21072): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045232.985:21073): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045232.985:21073): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a30640 items=0 ppid=8795 pid=22218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045232.985:21073): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045232.986:21074): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045232.986:21074): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a32d20 items=0 ppid=8795 pid=22218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045232.986:21074): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045232.987:21075): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045232.987:21075): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a33700 items=0 ppid=8795 pid=22218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045232.987:21075): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045232.987:21076): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045232.987:21076): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a32d20 items=0 ppid=8795 pid=22218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045232.987:21076): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045234.307:21077): table=filter family=2 entries=98 >type=SYSCALL msg=audit(1538045234.307:21077): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1cc4c00 items=0 ppid=470 pid=22245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045234.307:21077): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045234.336:21078): table=filter family=10 entries=74 >type=SYSCALL msg=audit(1538045234.336:21078): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=b7b840 items=0 ppid=470 pid=22247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045234.336:21078): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045235.514:21079): pid=22258 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045235.515:21080): pid=22258 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C766368616E6765202D612079202D2D796573202D4B2063696E6465722D766F6C756D65732F766F6C756D652D33373838643636632D616631642D343239372D613630662D613736383935363030383238 terminal=? res=success' >type=CRED_REFR msg=audit(1538045235.516:21081): pid=22258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045235.546:21082): pid=22258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045236.012:21083): pid=22258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045236.012:21084): pid=22258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045236.219:21085): pid=22270 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045236.220:21086): pid=22270 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C20637265617465202F6465762F63696E6465722D766F6C756D65732F766F6C756D652D33373838643636632D616631642D343239372D613630662D6137363839353630303832382069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D33373838643636632D616631642D343239372D613630662D613736383935363030383238204D7946486E6F735663533973387456624461704B207143655755794A7A64787943376A4C5A2046616C7365202D7033323630202D613137322E31362E312E3133 terminal=? res=success' >type=CRED_REFR msg=audit(1538045236.220:21087): pid=22270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045236.247:21088): pid=22270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045237.007:21089): pid=22270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045237.007:21090): pid=22270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045237.154:21091): pid=22294 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045237.154:21092): pid=22294 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045237.154:21093): pid=22294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045237.193:21094): pid=22294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045237.568:21095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045237.568:21096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045237.570:21097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045237.605:21098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045238.290:21099): pid=22294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045238.290:21100): pid=22294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045238.455:21101): pid=22318 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045238.455:21102): pid=22318 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045238.456:21103): pid=22318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045238.472:21104): pid=22318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045239.350:21105): pid=22318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045239.350:21106): pid=22318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045239.513:21107): pid=22350 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045239.513:21108): pid=22350 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206164642D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D33373838643636632D616631642D343239372D613630662D613736383935363030383238204D7946486E6F735663533973387456624461704B207143655755794A7A64787943376A4C5A2069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538045239.513:21109): pid=22350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045239.536:21110): pid=22350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045239.793:21111): dev=qr-d8b14085-d3 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045239.793:21111): arch=c000003e syscall=46 success=yes exit=76 a0=a2 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045239.793:21111): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045240.224:21112): table=filter family=2 entries=100 >type=SYSCALL msg=audit(1538045240.224:21112): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=13a7520 items=0 ppid=470 pid=22398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045240.224:21112): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045240.250:21113): table=filter family=10 entries=76 >type=SYSCALL msg=audit(1538045240.250:21113): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=c2a230 items=0 ppid=470 pid=22401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045240.250:21113): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045240.569:21114): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045240.569:21114): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1e8c050 items=0 ppid=8841 pid=22424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045240.569:21114): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045240.666:21115): pid=22350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045240.666:21116): pid=22350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045240.699:21117): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538045240.699:21117): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7953e0 items=0 ppid=8841 pid=22431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045240.699:21117): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045240.699:21118): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538045240.699:21118): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=796980 items=0 ppid=8841 pid=22431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045240.699:21118): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045240.821:21119): pid=22430 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045240.821:21120): pid=22430 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045240.821:21121): pid=22430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045240.843:21122): pid=22430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045241.468:21123): pid=22430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045241.468:21124): pid=22430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045242.818:21125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045242.818:21126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045242.820:21127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045242.853:21128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045247.306:21129): dev=qvbd3935415-1c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045247.306:21129): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7fffff1c8370 a2=0 a3=7fffff1c7da0 items=0 ppid=10687 pid=22559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045247.306:21129): proctitle=6970006C696E6B007365740071766264333933353431352D31630070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045247.355:21130): dev=qvod3935415-1c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045247.355:21130): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffd72bc7750 a2=0 a3=7ffd72bc7160 items=0 ppid=10687 pid=22573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045247.355:21130): proctitle=6970006C696E6B007365740071766F64333933353431352D31630070726F6D697363006F6E >type=SERVICE_START msg=audit(1538045247.460:21131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045247.783:21132): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 vm-ctx=system_u:system_r:svirt_t:s0:c515,c517 img-ctx=system_u:object_r:svirt_image_t:s0:c515,c517 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045247.783:21133): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045247.794:21134): dev=tapd3935415-1c prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045247.794:21134): arch=c000003e syscall=16 success=yes exit=0 a0=54 a1=89a2 a2=7f20e5480f60 a3=53202d2065663a61 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045247.794:21134): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045247.842:21135): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 net=fa:16:3e:8b:8a:fe path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045247.842:21136): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 net=fa:16:3e:8b:8a:fe path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045247.894:21137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045247.894:21138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045247.896:21139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045247.911:21140): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d15\x2dinstance\x2d0000000e.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045247.912:21141): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d15\x2dinstance\x2d0000000e.scope/" class=path path="/dev/sdb" rdev=08:10 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045247.912:21142): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d15\x2dinstance\x2d0000000e.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045247.912:21143): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d15\x2dinstance\x2d0000000e.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045247.912:21144): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d15\x2dinstance\x2d0000000e.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045247.912:21145): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d15\x2dinstance\x2d0000000e.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045247.912:21146): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d15\x2dinstance\x2d0000000e.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045247.912:21147): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d15\x2dinstance\x2d0000000e.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045247.912:21148): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d15\x2dinstance\x2d0000000e.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045247.912:21149): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d15\x2dinstance\x2d0000000e.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045247.912:21150): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d15\x2dinstance\x2d0000000e.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045247.912:21151): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d15\x2dinstance\x2d0000000e.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045247.934:21152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=VIRT_RESOURCE msg=audit(1538045248.125:21153): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 old-disk="?" new-disk="/dev/sdb" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045248.125:21154): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 old-net="?" new-net="fa:16:3e:8b:8a:fe" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045248.125:21155): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 old-chardev="?" new-chardev="/dev/pts/1" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045248.125:21156): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045248.125:21157): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045248.125:21158): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 vm-pid=22770 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045248.236:21159): table=filter family=2 entries=102 >type=SYSCALL msg=audit(1538045248.236:21159): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9e6390 items=0 ppid=470 pid=22810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045248.236:21159): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045248.236:21160): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538045248.236:21160): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9cb7e0 items=0 ppid=470 pid=22810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045248.236:21160): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045248.269:21161): table=filter family=10 entries=78 >type=SYSCALL msg=audit(1538045248.269:21161): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=22ac610 items=0 ppid=470 pid=22812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045248.269:21161): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045248.269:21162): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538045248.269:21162): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2295570 items=0 ppid=470 pid=22812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045248.269:21162): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045250.135:21163): dev=qvb13c93904-e6 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045250.135:21163): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffca7704100 a2=0 a3=7ffca7703b20 items=0 ppid=10687 pid=22857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045250.135:21163): proctitle=6970006C696E6B007365740071766231336339333930342D65360070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045250.181:21164): dev=qvo13c93904-e6 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045250.181:21164): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7fff712cf8b0 a2=0 a3=7fff712cf2e0 items=0 ppid=10687 pid=22864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045250.181:21164): proctitle=6970006C696E6B007365740071766F31336339333930342D65360070726F6D697363006F6E >type=VIRT_MACHINE_ID msg=audit(1538045250.614:21165): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 vm-ctx=system_u:system_r:svirt_t:s0:c585,c951 img-ctx=system_u:object_r:svirt_image_t:s0:c585,c951 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045250.614:21166): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045250.655:21167): dev=tap13c93904-e6 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045250.655:21167): arch=c000003e syscall=16 success=yes exit=0 a0=55 a1=89a2 a2=7f20e4c7ff60 a3=53202d2036303a33 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045250.655:21167): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045250.707:21168): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 net=fa:16:3e:0b:13:06 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045250.707:21169): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 net=fa:16:3e:0b:13:06 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045250.821:21170): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d16\x2dinstance\x2d0000000f.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045250.821:21171): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d16\x2dinstance\x2d0000000f.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045250.821:21172): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d16\x2dinstance\x2d0000000f.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045250.821:21173): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d16\x2dinstance\x2d0000000f.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045250.822:21174): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d16\x2dinstance\x2d0000000f.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045250.822:21175): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d16\x2dinstance\x2d0000000f.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045250.822:21176): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d16\x2dinstance\x2d0000000f.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045250.822:21177): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d16\x2dinstance\x2d0000000f.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045250.822:21178): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d16\x2dinstance\x2d0000000f.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045250.822:21179): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d16\x2dinstance\x2d0000000f.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045250.823:21180): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d16\x2dinstance\x2d0000000f.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045251.010:21181): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 old-disk="?" new-disk="/var/lib/nova/instances/1d6033fa-a403-4c31-8f43-bbea20ef6192/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045251.010:21182): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 old-net="?" new-net="fa:16:3e:0b:13:06" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045251.010:21183): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 old-chardev="?" new-chardev="/dev/pts/2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045251.010:21184): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045251.010:21185): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045251.010:21186): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 vm-pid=22956 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045252.430:21187): table=filter family=2 entries=130 >type=SYSCALL msg=audit(1538045252.430:21187): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1ad8b60 items=0 ppid=470 pid=23125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045252.430:21187): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045252.431:21188): table=raw family=2 entries=15 >type=SYSCALL msg=audit(1538045252.431:21188): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1ab94f0 items=0 ppid=470 pid=23125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045252.431:21188): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045252.486:21189): table=filter family=10 entries=105 >type=SYSCALL msg=audit(1538045252.486:21189): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2592000 items=0 ppid=470 pid=23127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045252.486:21189): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045252.486:21190): table=raw family=10 entries=15 >type=SYSCALL msg=audit(1538045252.486:21190): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2575020 items=0 ppid=470 pid=23127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045252.486:21190): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045253.069:21191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045253.069:21192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045253.073:21193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045253.126:21194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045256.055:21195): pid=23209 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045256.056:21196): pid=23209 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045256.056:21197): pid=23209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045256.106:21198): pid=23209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045256.647:21199): pid=23209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045256.647:21200): pid=23209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045256.838:21201): pid=23220 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045256.839:21202): pid=23220 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045256.839:21203): pid=23220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045256.884:21204): pid=23220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045257.700:21205): pid=23220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045257.700:21206): pid=23220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045257.877:21207): pid=23261 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045257.877:21208): pid=23261 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045257.883:21209): pid=23261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045257.902:21210): pid=23261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045258.126:21211): pid=23261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045258.126:21212): pid=23261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045258.128:21213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045258.128:21214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045258.130:21215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045258.147:21216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045258.260:21217): pid=23271 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045258.260:21218): pid=23271 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045258.261:21219): pid=23271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045258.285:21220): pid=23271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045258.442:21221): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045258.442:21221): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1c07320 items=0 ppid=8841 pid=23282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045258.442:21221): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045258.533:21222): pid=23271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045258.534:21223): pid=23271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045260.846:21224): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045260.846:21224): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1df6e50 items=0 ppid=8841 pid=23312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045260.846:21224): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_STOP msg=audit(1538045261.409:21225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045263.318:21226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045263.318:21227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045263.320:21228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045263.345:21229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045268.567:21230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045268.567:21231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045268.569:21232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045268.585:21233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045273.816:21234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045273.817:21235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045273.818:21236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045273.830:21237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045279.067:21238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045279.067:21239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045279.069:21240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045279.078:21241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045281.825:21242): pid=23378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045281.826:21243): pid=23378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045281.827:21244): pid=23378 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=433 res=1 >type=USER_START msg=audit(1538045281.861:21245): pid=23378 uid=0 auid=163 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045281.863:21246): pid=23378 uid=0 auid=163 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045284.317:21247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045284.317:21248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045284.320:21249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045284.340:21250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRED_DISP msg=audit(1538045284.452:21251): pid=23378 uid=0 auid=163 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045284.455:21252): pid=23378 uid=0 auid=163 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045289.566:21253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045289.566:21254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045289.569:21255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045289.579:21256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045294.817:21257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045294.817:21258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045294.819:21259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045294.833:21260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045300.071:21261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045300.071:21262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045300.073:21263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045300.084:21264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045305.317:21265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045305.317:21266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045305.320:21267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045305.331:21268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045306.340:21269): dev=tapd3935415-1c prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SERVICE_START msg=audit(1538045306.377:21270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045306.525:21271): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-0000000e" uuid=64203eb9-c62e-4e03-a6e8-9e5fee0a8d20 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045306.847:21272): table=nat family=2 entries=33 >type=SYSCALL msg=audit(1538045306.847:21272): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=23f6100 items=0 ppid=8841 pid=23537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045306.847:21272): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045308.361:21273): table=filter family=2 entries=160 >type=SYSCALL msg=audit(1538045308.361:21273): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1469f80 items=0 ppid=470 pid=23565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045308.361:21273): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045308.361:21274): table=raw family=2 entries=18 >type=SYSCALL msg=audit(1538045308.361:21274): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=144dee0 items=0 ppid=470 pid=23565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045308.361:21274): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045308.388:21275): table=filter family=10 entries=134 >type=SYSCALL msg=audit(1538045308.388:21275): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=141ed50 items=0 ppid=470 pid=23567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045308.388:21275): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045308.389:21276): table=raw family=10 entries=18 >type=SYSCALL msg=audit(1538045308.389:21276): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=14054d0 items=0 ppid=470 pid=23567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045308.389:21276): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045309.480:21277): pid=23575 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045309.481:21278): pid=23575 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D33373838643636632D616631642D343239372D613630662D6137363839353630303832382069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538045309.481:21279): pid=23575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045309.507:21280): pid=23575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045309.578:21281): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045309.578:21281): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045309.578:21281): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045309.578:21281): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045309.578:21281): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045309.578:21281): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045309.578:21281): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045309.578:21281): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f36cd592578 a2=0 a3=7ffdecffd9b0 items=0 ppid=8830 pid=23579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045309.578:21281): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538045309.784:21282): dev=tapea2a4c9f-b7 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045309.784:21282): arch=c000003e syscall=46 success=yes exit=76 a0=a2 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045309.784:21282): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045309.922:21283): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045309.922:21283): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8ca640 items=0 ppid=8795 pid=23624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045309.922:21283): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045309.924:21284): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045309.924:21284): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8ccd20 items=0 ppid=8795 pid=23624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045309.924:21284): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045309.925:21285): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045309.925:21285): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8cd700 items=0 ppid=8795 pid=23624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045309.925:21285): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045309.925:21286): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045309.925:21286): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8ccd20 items=0 ppid=8795 pid=23624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045309.925:21286): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045310.044:21287): pid=23575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045310.044:21288): pid=23575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045310.221:21289): pid=23636 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045310.221:21290): pid=23636 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045310.222:21291): pid=23636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045310.251:21292): pid=23636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045310.343:21293): table=filter family=2 entries=132 >type=SYSCALL msg=audit(1538045310.343:21293): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=12158a0 items=0 ppid=470 pid=23647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045310.343:21293): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045310.369:21294): table=filter family=10 entries=107 >type=SYSCALL msg=audit(1538045310.369:21294): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=13126c0 items=0 ppid=470 pid=23649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045310.369:21294): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045310.569:21295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045310.569:21296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045310.571:21297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045310.584:21298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045311.344:21299): pid=23636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045311.344:21300): pid=23636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045311.493:21301): pid=23766 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045311.493:21302): pid=23766 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045311.493:21303): pid=23766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045311.517:21304): pid=23766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045312.032:21305): dev=qvb9ece764d-b2 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045312.032:21305): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffd45471e30 a2=0 a3=7ffd45471860 items=0 ppid=10687 pid=23867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045312.032:21305): proctitle=6970006C696E6B007365740071766239656365373634642D62320070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045312.067:21306): dev=qvo9ece764d-b2 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045312.067:21306): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffe95b129c0 a2=0 a3=7ffe95b123e0 items=0 ppid=10687 pid=23876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045312.067:21306): proctitle=6970006C696E6B007365740071766F39656365373634642D62320070726F6D697363006F6E >type=USER_END msg=audit(1538045312.261:21307): pid=23766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045312.261:21308): pid=23766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045312.266:21309): dev=tap9ece764d-b2 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045312.266:21309): arch=c000003e syscall=16 success=yes exit=0 a0=4d a1=89a2 a2=7f20e447f620 a3=53202d2065363a33 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045312.266:21309): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045312.336:21310): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 net=fa:16:3e:53:f3:6e path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045312.336:21311): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 net=fa:16:3e:53:f3:6e path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045312.370:21312): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=attach vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 old-net="?" new-net="fa:16:3e:53:f3:6e" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045312.481:21313): pid=23930 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045312.482:21314): pid=23930 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D33373838643636632D616631642D343239372D613630662D613736383935363030383238 terminal=? res=success' >type=CRED_REFR msg=audit(1538045312.482:21315): pid=23930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045312.511:21316): pid=23930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045312.576:21317): table=filter family=2 entries=134 >type=SYSCALL msg=audit(1538045312.576:21317): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1dda9e0 items=0 ppid=470 pid=23988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045312.576:21317): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045312.577:21318): table=raw family=2 entries=15 >type=SYSCALL msg=audit(1538045312.577:21318): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1dba600 items=0 ppid=470 pid=23988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045312.577:21318): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045312.617:21319): table=filter family=10 entries=109 >type=SYSCALL msg=audit(1538045312.617:21319): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=20045a0 items=0 ppid=470 pid=23997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045312.617:21319): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045312.618:21320): table=raw family=10 entries=15 >type=SYSCALL msg=audit(1538045312.618:21320): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1fe8550 items=0 ppid=470 pid=23997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045312.618:21320): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045313.030:21321): pid=23930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045313.031:21322): pid=23930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045313.173:21323): pid=24022 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045313.173:21324): pid=24022 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045313.174:21325): pid=24022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045313.188:21326): pid=24022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045313.633:21327): pid=24022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045313.633:21328): pid=24022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045315.469:21329): pid=24097 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045315.469:21330): pid=24097 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045315.470:21331): pid=24097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045315.497:21332): pid=24097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045315.817:21333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045315.817:21334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045315.819:21335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045315.853:21336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045316.015:21337): pid=24110 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045316.016:21338): pid=24110 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045316.016:21339): pid=24110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045316.034:21340): pid=24110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045316.163:21341): pid=24097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045316.163:21342): pid=24097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045316.293:21343): pid=24110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045316.293:21344): pid=24110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045316.318:21345): pid=24123 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045316.318:21346): pid=24123 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F766F6C756D652D33373838643636632D616631642D343239372D613630662D613736383935363030383238 terminal=? res=success' >type=CRED_REFR msg=audit(1538045316.319:21347): pid=24123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045316.334:21348): pid=24123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045316.392:21349): pid=24128 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045316.392:21350): pid=24128 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045316.392:21351): pid=24128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045316.411:21352): pid=24128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045316.592:21353): pid=24123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045316.592:21354): pid=24123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045316.705:21355): pid=24128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045316.705:21356): pid=24128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045316.721:21357): pid=24141 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045316.721:21358): pid=24141 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76646973706C6179202D2D6E6F68656164696E67202D43202D6F20417474722063696E6465722D766F6C756D65732F766F6C756D652D33373838643636632D616631642D343239372D613630662D613736383935363030383238 terminal=? res=success' >type=CRED_REFR msg=audit(1538045316.721:21359): pid=24141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045316.764:21360): pid=24141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045316.851:21361): pid=24147 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045316.852:21362): pid=24147 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045316.852:21363): pid=24147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045316.861:21364): pid=24147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045317.174:21365): pid=24147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045317.174:21366): pid=24147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045317.285:21367): pid=24158 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045317.286:21368): pid=24158 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045317.286:21369): pid=24158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045317.306:21370): pid=24141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045317.306:21371): pid=24158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045317.306:21372): pid=24141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045317.436:21373): pid=24163 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045317.437:21374): pid=24163 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C7672656D6F7665202D2D636F6E6669672061637469766174696F6E207B2072657472795F646561637469766174696F6E203D20317D20202D662063696E6465722D766F6C756D65732F766F6C756D652D33373838643636632D616631642D343239372D613630662D613736383935363030383238 terminal=? res=success' >type=CRED_REFR msg=audit(1538045317.437:21375): pid=24163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045317.455:21376): pid=24163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045317.634:21377): pid=24158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045317.634:21378): pid=24158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045317.877:21379): pid=24163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045317.877:21380): pid=24163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045318.111:21381): pid=24184 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045318.112:21382): pid=24184 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045318.113:21383): pid=24184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045318.130:21384): pid=24184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045318.449:21385): pid=24184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045318.449:21386): pid=24184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045318.590:21387): pid=24192 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045318.591:21388): pid=24192 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045318.591:21389): pid=24192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045318.612:21390): pid=24192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045318.909:21391): pid=24192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045318.909:21392): pid=24192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045318.997:21393): pid=24201 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045318.997:21394): pid=24201 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F5F736E617073686F742D65613238643863312D303931622D343232342D623535312D306234663264326465666434 terminal=? res=success' >type=CRED_REFR msg=audit(1538045318.997:21395): pid=24201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045319.010:21396): pid=24201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045319.057:21397): pid=24205 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045319.058:21398): pid=24205 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045319.058:21399): pid=24205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045319.071:21400): pid=24205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045319.404:21401): pid=24201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045319.404:21402): pid=24201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045319.554:21403): pid=24216 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045319.554:21404): pid=24216 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C7672656D6F7665202D2D636F6E6669672061637469766174696F6E207B2072657472795F646561637469766174696F6E203D20317D20202D662063696E6465722D766F6C756D65732F5F736E617073686F742D65613238643863312D303931622D343232342D623535312D306234663264326465666434 terminal=? res=success' >type=CRED_REFR msg=audit(1538045319.555:21405): pid=24216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045319.573:21406): pid=24216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045319.575:21407): pid=24205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045319.575:21408): pid=24205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045319.687:21409): pid=24222 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045319.687:21410): pid=24222 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045319.687:21411): pid=24222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045319.699:21412): pid=24222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045320.069:21413): pid=24222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045320.069:21414): pid=24222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045320.084:21415): pid=24216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045320.084:21416): pid=24216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045321.067:21417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045321.067:21418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045321.070:21419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045321.088:21420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_STOP msg=audit(1538045322.405:21421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045324.435:21422): dev=tap0cc5faf6-12 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SERVICE_START msg=audit(1538045324.486:21423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045324.625:21424): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-0000000d" uuid=e439a731-ef8b-4e25-ad8a-d210639fa946 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045325.042:21425): dev=qvbc7a435ae-70 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045325.042:21425): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffc4695cf20 a2=0 a3=7ffc4695c960 items=0 ppid=10687 pid=24434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045325.042:21425): proctitle=6970006C696E6B007365740071766263376134333561652D37300070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045325.072:21426): dev=qvoc7a435ae-70 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045325.072:21426): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffcd75043e0 a2=0 a3=7ffcd7503e20 items=0 ppid=10687 pid=24440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045325.072:21426): proctitle=6970006C696E6B007365740071766F63376134333561652D37300070726F6D697363006F6E >type=NETFILTER_CFG msg=audit(1538045325.164:21427): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045325.164:21427): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=147bc40 items=0 ppid=8841 pid=24445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045325.164:21427): proctitle=69707461626C65732D726573746F7265002D6E >type=VIRT_MACHINE_ID msg=audit(1538045325.494:21428): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 vm-ctx=system_u:system_r:svirt_t:s0:c531,c922 img-ctx=system_u:object_r:svirt_image_t:s0:c531,c922 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045325.494:21429): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045325.512:21430): dev=tapc7a435ae-70 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045325.512:21430): arch=c000003e syscall=16 success=yes exit=0 a0=54 a1=89a2 a2=7f20e447ef60 a3=53202d2031323a32 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045325.512:21430): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045325.591:21431): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 net=fa:16:3e:d4:62:21 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.592:21432): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 net=fa:16:3e:d4:62:21 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.657:21433): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d17\x2dinstance\x2d00000010.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.657:21434): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d17\x2dinstance\x2d00000010.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.657:21435): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d17\x2dinstance\x2d00000010.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.657:21436): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d17\x2dinstance\x2d00000010.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.658:21437): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d17\x2dinstance\x2d00000010.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.658:21438): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d17\x2dinstance\x2d00000010.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.658:21439): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d17\x2dinstance\x2d00000010.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.659:21440): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d17\x2dinstance\x2d00000010.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.659:21441): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d17\x2dinstance\x2d00000010.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.659:21442): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d17\x2dinstance\x2d00000010.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.659:21443): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d17\x2dinstance\x2d00000010.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.947:21444): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 old-disk="?" new-disk="/var/lib/nova/instances/c56af80f-0895-4abb-b735-1601e46865c6/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.947:21445): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 old-net="?" new-net="fa:16:3e:d4:62:21" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.947:21446): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 old-chardev="?" new-chardev="/dev/pts/1" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.947:21447): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045325.947:21448): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045325.947:21449): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 vm-pid=24517 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045326.319:21450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045326.319:21451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045326.322:21452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045326.333:21453): table=filter family=2 entries=161 >type=SYSCALL msg=audit(1538045326.333:21453): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=b62ff0 items=0 ppid=470 pid=24553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045326.333:21453): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045326.334:21454): table=raw family=2 entries=18 >type=SYSCALL msg=audit(1538045326.334:21454): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=b3df30 items=0 ppid=470 pid=24553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045326.334:21454): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=SERVICE_STOP msg=audit(1538045326.354:21455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045326.379:21456): table=filter family=10 entries=137 >type=SYSCALL msg=audit(1538045326.379:21456): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=15f4720 items=0 ppid=470 pid=24557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045326.379:21456): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045326.380:21457): table=raw family=10 entries=18 >type=SYSCALL msg=audit(1538045326.380:21457): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=15d19e0 items=0 ppid=470 pid=24557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045326.380:21457): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045326.723:21458): table=filter family=2 entries=191 >type=SYSCALL msg=audit(1538045326.723:21458): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=14a51d0 items=0 ppid=470 pid=24563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045326.723:21458): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045326.724:21459): table=raw family=2 entries=21 >type=SYSCALL msg=audit(1538045326.724:21459): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=14844d0 items=0 ppid=470 pid=24563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045326.724:21459): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045326.747:21460): table=filter family=10 entries=166 >type=SYSCALL msg=audit(1538045326.747:21460): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=919470 items=0 ppid=470 pid=24565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045326.747:21460): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045326.747:21461): table=raw family=10 entries=21 >type=SYSCALL msg=audit(1538045326.747:21461): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=8f9cb0 items=0 ppid=470 pid=24565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045326.747:21461): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045328.442:21462): pid=24579 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045328.443:21463): pid=24579 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652D696E69746961746F722069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D32353061316133652D306538342D343039302D613966372D3837363531643561356138312069716E2E313939342D30352E636F6D2E7265646861743A313938626562623363316466 terminal=? res=success' >type=CRED_REFR msg=audit(1538045328.443:21464): pid=24579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045328.473:21465): pid=24579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045329.142:21466): pid=24579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045329.142:21467): pid=24579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045329.316:21468): pid=24598 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045329.316:21469): pid=24598 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045329.317:21470): pid=24598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045329.337:21471): pid=24598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045330.253:21472): pid=24598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045330.253:21473): pid=24598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045330.404:21474): pid=24617 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045330.404:21475): pid=24617 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045330.404:21476): pid=24617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045330.422:21477): pid=24617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045331.042:21478): pid=24617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045331.042:21479): pid=24617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045331.187:21480): pid=24632 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045331.187:21481): pid=24632 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2064656C6574652069716E2E323031302D31302E6F72672E6F70656E737461636B3A766F6C756D652D32353061316133652D306538342D343039302D613966372D383736353164356135613831 terminal=? res=success' >type=CRED_REFR msg=audit(1538045331.187:21482): pid=24632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045331.207:21483): pid=24632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045331.567:21484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045331.567:21485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045331.569:21486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045331.592:21487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045331.724:21488): pid=24632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045331.724:21489): pid=24632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045331.853:21490): pid=24653 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045331.854:21491): pid=24653 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C2073617665 terminal=? res=success' >type=CRED_REFR msg=audit(1538045331.854:21492): pid=24653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045331.870:21493): pid=24653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045332.275:21494): pid=24653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045332.275:21495): pid=24653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045336.292:21496): pid=24684 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045336.293:21497): pid=24684 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E662063696E6465722D727473746F6F6C206765742D74617267657473 terminal=? res=success' >type=CRED_REFR msg=audit(1538045336.293:21498): pid=24684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045336.324:21499): pid=24684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045336.411:21500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045336.816:21501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045336.816:21502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045336.818:21503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045336.828:21504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045337.114:21505): pid=24684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045337.114:21506): pid=24684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045337.250:21507): pid=24709 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045337.250:21508): pid=24709 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D65732F766F6C756D652D32353061316133652D306538342D343039302D613966372D383736353164356135613831 terminal=? res=success' >type=CRED_REFR msg=audit(1538045337.250:21509): pid=24709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045337.269:21510): pid=24709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045337.623:21511): pid=24709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045337.623:21512): pid=24709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045337.791:21513): pid=24718 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045337.791:21514): pid=24718 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C76646973706C6179202D2D6E6F68656164696E67202D43202D6F20417474722063696E6465722D766F6C756D65732F766F6C756D652D32353061316133652D306538342D343039302D613966372D383736353164356135613831 terminal=? res=success' >type=CRED_REFR msg=audit(1538045337.792:21515): pid=24718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045337.811:21516): pid=24718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045338.100:21517): pid=24718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045338.100:21518): pid=24718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045338.209:21519): pid=24726 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045338.209:21520): pid=24726 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E66206C7672656D6F7665202D2D636F6E6669672061637469766174696F6E207B2072657472795F646561637469766174696F6E203D20317D20202D662063696E6465722D766F6C756D65732F766F6C756D652D32353061316133652D306538342D343039302D613966372D383736353164356135613831 terminal=? res=success' >type=CRED_REFR msg=audit(1538045338.210:21521): pid=24726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045338.231:21522): pid=24726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045338.877:21523): pid=24726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045338.877:21524): pid=24726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045339.165:21525): pid=24743 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045339.166:21526): pid=24743 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045339.166:21527): pid=24743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045339.183:21528): pid=24743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045339.471:21529): pid=24743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045339.471:21530): pid=24743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045339.611:21531): pid=24752 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045339.611:21532): pid=24752 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045339.611:21533): pid=24752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045339.624:21534): pid=24752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045340.103:21535): pid=24752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045340.103:21536): pid=24752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045340.226:21537): pid=24761 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045340.227:21538): pid=24761 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045340.227:21539): pid=24761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045340.243:21540): pid=24761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045340.468:21541): pid=24761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045340.468:21542): pid=24761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045340.597:21543): pid=24770 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045340.598:21544): pid=24770 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045340.598:21545): pid=24770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045340.610:21546): pid=24770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045341.169:21547): pid=24770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045341.169:21548): pid=24770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045341.479:21549): pid=24790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045341.479:21550): pid=24790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045341.480:21551): pid=24790 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=434 res=1 >type=USER_START msg=audit(1538045341.510:21552): pid=24790 uid=0 auid=163 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045341.511:21553): pid=24790 uid=0 auid=163 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045342.068:21554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045342.068:21555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045342.085:21556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045342.107:21557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045342.324:21558): table=filter family=2 entries=163 >type=SYSCALL msg=audit(1538045342.324:21558): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1deeac0 items=0 ppid=470 pid=24811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045342.324:21558): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045342.362:21559): table=filter family=10 entries=139 >type=SYSCALL msg=audit(1538045342.362:21559): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=22b1db0 items=0 ppid=470 pid=24813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045342.362:21559): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=CRED_DISP msg=audit(1538045343.742:21560): pid=24790 uid=0 auid=163 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045343.758:21561): pid=24790 uid=0 auid=163 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045344.398:21562): dev=qr-d6ab863a-8d prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045344.398:21562): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045344.398:21562): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538045344.574:21563): dev=qg-1a8ba803-74 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045344.574:21563): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045344.574:21563): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045344.678:21564): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045344.678:21564): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9c8ff0 items=0 ppid=8841 pid=24834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045344.678:21564): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045344.679:21565): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045344.679:21565): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9c8770 items=0 ppid=8841 pid=24834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045344.679:21565): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045344.752:21566): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538045344.752:21566): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1644fd0 items=0 ppid=8841 pid=24837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045344.752:21566): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045344.752:21567): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538045344.752:21567): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1645c90 items=0 ppid=8841 pid=24837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045344.752:21567): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045346.354:21568): table=filter family=2 entries=161 >type=SYSCALL msg=audit(1538045346.354:21568): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10ae1a0 items=0 ppid=470 pid=24849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045346.354:21568): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045346.391:21569): table=filter family=10 entries=137 >type=SYSCALL msg=audit(1538045346.391:21569): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=16493c0 items=0 ppid=470 pid=24851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045346.391:21569): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045347.317:21570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045347.317:21571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045347.321:21572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045347.334:21573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045347.489:21574): dev=tapa50da0c2-97 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045347.489:21574): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045347.489:21574): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045348.346:21575): table=filter family=2 entries=159 >type=SYSCALL msg=audit(1538045348.346:21575): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=c26880 items=0 ppid=470 pid=24867 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045348.346:21575): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045348.383:21576): table=filter family=10 entries=135 >type=SYSCALL msg=audit(1538045348.383:21576): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=11749d0 items=0 ppid=470 pid=24869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045348.383:21576): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045352.318:21577): table=filter family=2 entries=157 >type=SYSCALL msg=audit(1538045352.318:21577): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1737f60 items=0 ppid=470 pid=24883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045352.318:21577): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045352.342:21578): table=filter family=10 entries=133 >type=SYSCALL msg=audit(1538045352.342:21578): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=23defe0 items=0 ppid=470 pid=24885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045352.342:21578): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045352.568:21579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045352.568:21580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045352.570:21581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045352.584:21582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045354.081:21583): dev=qr-5fcd110c-30 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045354.081:21583): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045354.081:21583): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538045354.258:21584): dev=qg-525bddfe-b4 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045354.258:21584): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045354.258:21584): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045354.334:21585): table=filter family=2 entries=155 >type=SYSCALL msg=audit(1538045354.334:21585): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1851640 items=0 ppid=470 pid=24912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045354.334:21585): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045354.377:21586): table=filter family=10 entries=131 >type=SYSCALL msg=audit(1538045354.377:21586): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=146b5f0 items=0 ppid=470 pid=24915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045354.377:21586): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045354.402:21587): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045354.402:21587): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=16a7ff0 items=0 ppid=8841 pid=24916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045354.402:21587): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045354.403:21588): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045354.403:21588): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=16a7770 items=0 ppid=8841 pid=24916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045354.403:21588): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045354.507:21589): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538045354.507:21589): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a72fd0 items=0 ppid=8841 pid=24921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045354.507:21589): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045354.507:21590): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538045354.507:21590): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a73c90 items=0 ppid=8841 pid=24921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045354.507:21590): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045357.527:21591): dev=tap83c8eaa2-43 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045357.527:21591): arch=c000003e syscall=46 success=yes exit=32 a0=12 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045357.527:21591): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=SERVICE_START msg=audit(1538045357.819:21592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045357.819:21593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045357.820:21594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045357.829:21595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045358.337:21596): table=filter family=2 entries=153 >type=SYSCALL msg=audit(1538045358.337:21596): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2570d20 items=0 ppid=470 pid=24948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045358.337:21596): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045358.372:21597): table=filter family=10 entries=129 >type=SYSCALL msg=audit(1538045358.372:21597): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=190ac00 items=0 ppid=470 pid=24950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045358.372:21597): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045362.333:21598): table=filter family=2 entries=151 >type=SYSCALL msg=audit(1538045362.333:21598): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b15f40 items=0 ppid=470 pid=24976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045362.333:21598): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045362.334:21599): table=raw family=2 entries=18 >type=SYSCALL msg=audit(1538045362.334:21599): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b0de40 items=0 ppid=470 pid=24976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045362.334:21599): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045362.372:21600): table=filter family=10 entries=127 >type=SYSCALL msg=audit(1538045362.372:21600): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2277d00 items=0 ppid=470 pid=24978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045362.372:21600): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045362.373:21601): table=raw family=10 entries=18 >type=SYSCALL msg=audit(1538045362.373:21601): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=226e360 items=0 ppid=470 pid=24978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045362.373:21601): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045363.067:21602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045363.067:21603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045363.070:21604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045363.086:21605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045364.716:21606): dev=tapc7a435ae-70 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SERVICE_START msg=audit(1538045364.805:21607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045364.894:21608): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000010" uuid=c56af80f-0895-4abb-b735-1601e46865c6 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045366.333:21609): table=filter family=2 entries=127 >type=SYSCALL msg=audit(1538045366.333:21609): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=18dbbd0 items=0 ppid=470 pid=25056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045366.333:21609): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045366.333:21610): table=raw family=2 entries=15 >type=SYSCALL msg=audit(1538045366.333:21610): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=18c6080 items=0 ppid=470 pid=25056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045366.333:21610): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045366.365:21611): table=filter family=10 entries=102 >type=SYSCALL msg=audit(1538045366.365:21611): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=abb7a0 items=0 ppid=470 pid=25061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045366.365:21611): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045366.366:21612): table=raw family=10 entries=15 >type=SYSCALL msg=audit(1538045366.366:21612): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=aa9530 items=0 ppid=470 pid=25061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045366.366:21612): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045367.595:21613): dev=tap9ece764d-b2 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045367.595:21613): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a1 a2=7fffe0c07df9 a3=7fffe0c05ce0 items=0 ppid=10687 pid=25085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045367.595:21613): proctitle=627263746C0064656C62720071627239656365373634642D6232 >type=VIRT_RESOURCE msg=audit(1538045367.763:21614): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=detach vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 old-net="fa:16:3e:53:f3:6e" new-net="?" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045368.317:21615): table=filter family=2 entries=97 >type=SYSCALL msg=audit(1538045368.317:21615): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1249170 items=0 ppid=470 pid=25136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045368.317:21615): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045368.319:21616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045368.319:21617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045368.321:21618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045368.342:21619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045368.351:21620): table=filter family=10 entries=73 >type=SYSCALL msg=audit(1538045368.351:21620): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2521d00 items=0 ppid=470 pid=25142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045368.351:21620): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045372.180:21621): dev=tapea2a4c9f-b7 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045372.180:21621): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045372.180:21621): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045372.329:21622): table=filter family=2 entries=94 >type=SYSCALL msg=audit(1538045372.329:21622): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10553c0 items=0 ppid=470 pid=25473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045372.329:21622): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045372.366:21623): table=filter family=10 entries=70 >type=SYSCALL msg=audit(1538045372.366:21623): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=7a7e20 items=0 ppid=470 pid=25475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045372.366:21623): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045373.568:21624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045373.568:21625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045373.572:21626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045373.583:21627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045376.020:21628): pid=25486 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045376.021:21629): pid=25486 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045376.021:21630): pid=25486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045376.058:21631): pid=25486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045376.632:21632): pid=25486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045376.632:21633): pid=25486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045376.798:21634): pid=25497 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045376.798:21635): pid=25497 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045376.798:21636): pid=25497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045376.809:21637): pid=25497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045377.320:21638): pid=25497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045377.320:21639): pid=25497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045377.459:21640): pid=25505 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045377.459:21641): pid=25505 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045377.459:21642): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045377.478:21643): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045377.738:21644): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045377.738:21645): pid=25505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045377.861:21646): pid=25514 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045377.861:21647): pid=25514 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045377.862:21648): pid=25514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045377.880:21649): pid=25514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045378.112:21650): pid=25514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045378.112:21651): pid=25514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045378.326:21652): dev=tap13c93904-e6 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1538045378.508:21653): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-0000000f" uuid=1d6033fa-a403-4c31-8f43-bbea20ef6192 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045378.610:21654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045378.610:21655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045378.613:21656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045378.634:21657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045379.053:21658): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045379.053:21658): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2211c40 items=0 ppid=8841 pid=25595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045379.053:21658): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045380.374:21659): table=filter family=2 entries=92 >type=SYSCALL msg=audit(1538045380.374:21659): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2349aa0 items=0 ppid=470 pid=25619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045380.374:21659): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045380.375:21660): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538045380.375:21660): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=233a230 items=0 ppid=470 pid=25619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045380.375:21660): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045380.400:21661): table=filter family=10 entries=68 >type=SYSCALL msg=audit(1538045380.400:21661): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2476430 items=0 ppid=470 pid=25621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045380.400:21661): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045380.401:21662): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538045380.401:21662): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=246b590 items=0 ppid=470 pid=25621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045380.401:21662): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045383.818:21663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045383.818:21664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045383.823:21665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045383.840:21666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045384.309:21667): table=filter family=2 entries=62 >type=SYSCALL msg=audit(1538045384.309:21667): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2155040 items=0 ppid=470 pid=25671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045384.309:21667): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045384.332:21668): table=filter family=10 entries=39 >type=SYSCALL msg=audit(1538045384.332:21668): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=dab990 items=0 ppid=470 pid=25673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045384.332:21668): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045386.373:21669): dev=qr-d8b14085-d3 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045386.373:21669): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045386.373:21669): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045386.581:21670): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538045386.581:21670): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d26fd0 items=0 ppid=8841 pid=25686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045386.581:21670): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045386.582:21671): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045386.582:21671): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d27ff0 items=0 ppid=8841 pid=25686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045386.582:21671): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045387.958:21672): dev=tapd59b96b5-35 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045387.958:21672): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045387.958:21672): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045388.292:21673): table=filter family=2 entries=60 >type=SYSCALL msg=audit(1538045388.292:21673): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1aa5720 items=0 ppid=470 pid=25696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045388.292:21673): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045388.313:21674): table=filter family=10 entries=37 >type=SYSCALL msg=audit(1538045388.313:21674): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=134dfa0 items=0 ppid=470 pid=25698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045388.313:21674): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045389.067:21675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045389.067:21676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045389.069:21677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045389.079:21678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_STOP msg=audit(1538045389.400:21679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045390.318:21680): table=filter family=2 entries=58 >type=SYSCALL msg=audit(1538045390.318:21680): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=db9e00 items=0 ppid=470 pid=25707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045390.318:21680): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045390.339:21681): table=filter family=10 entries=35 >type=SYSCALL msg=audit(1538045390.339:21681): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=7b15b0 items=0 ppid=470 pid=25709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045390.339:21681): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045390.712:21682): dev=qg-cf365295-11 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045390.712:21682): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045390.712:21682): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=SERVICE_START msg=audit(1538045394.317:21683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045394.317:21684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045394.320:21685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045394.332:21686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045398.511:21687): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045398.511:21687): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045398.511:21687): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045398.511:21687): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045398.511:21687): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045398.511:21687): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045398.511:21687): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045398.511:21687): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=25733 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045398.511:21687): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538045398.739:21688): dev=qg-9860bab4-e9 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045398.739:21688): arch=c000003e syscall=46 success=yes exit=76 a0=a2 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045398.739:21688): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045399.298:21689): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045399.298:21689): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=17de7b0 items=0 ppid=8841 pid=25788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045399.298:21689): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045399.299:21690): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045399.299:21690): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=17e08a0 items=0 ppid=8841 pid=25788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045399.299:21690): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045399.300:21691): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045399.300:21691): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=17e1f60 items=0 ppid=8841 pid=25788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045399.300:21691): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045399.301:21692): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045399.301:21692): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=17e16b0 items=0 ppid=8841 pid=25788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045399.301:21692): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045399.356:21693): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538045399.356:21693): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1c8ead0 items=0 ppid=8841 pid=25790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045399.356:21693): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045399.357:21694): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538045399.357:21694): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1c8fc50 items=0 ppid=8841 pid=25790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045399.357:21694): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045399.357:21695): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538045399.357:21695): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1c8fc50 items=0 ppid=8841 pid=25790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045399.357:21695): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045399.434:21696): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538045399.434:21696): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=20d0a60 items=0 ppid=8841 pid=25793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045399.434:21696): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045399.528:21697): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538045399.528:21697): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bc2ba0 items=0 ppid=8841 pid=25796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045399.528:21697): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045399.529:21698): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538045399.529:21698): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bc4af0 items=0 ppid=8841 pid=25796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045399.529:21698): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045399.529:21699): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1538045399.529:21699): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bc4af0 items=0 ppid=8841 pid=25796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045399.529:21699): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045399.571:21700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045399.571:21701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045399.574:21702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045399.594:21703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045400.232:21704): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045400.232:21704): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045400.232:21704): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045400.232:21704): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045400.232:21704): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045400.232:21704): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045400.232:21704): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045400.232:21704): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f36cd592578 a2=0 a3=7ffdecffd9b0 items=0 ppid=8830 pid=25804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045400.232:21704): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=NETFILTER_CFG msg=audit(1538045400.385:21705): table=filter family=2 entries=56 >type=SYSCALL msg=audit(1538045400.385:21705): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e67510 items=0 ppid=470 pid=25819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045400.385:21705): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045400.409:21706): table=filter family=10 entries=33 >type=SYSCALL msg=audit(1538045400.409:21706): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1447bf0 items=0 ppid=470 pid=25825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045400.409:21706): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045400.443:21707): dev=tapb058b460-ee prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045400.443:21707): arch=c000003e syscall=46 success=yes exit=76 a0=a2 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045400.443:21707): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045400.652:21708): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045400.652:21708): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=158a640 items=0 ppid=8795 pid=25847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045400.652:21708): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045400.654:21709): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045400.654:21709): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=158cd20 items=0 ppid=8795 pid=25847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045400.654:21709): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045400.654:21710): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045400.654:21710): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=158d700 items=0 ppid=8795 pid=25847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045400.654:21710): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045400.654:21711): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045400.654:21711): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=158cd20 items=0 ppid=8795 pid=25847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045400.654:21711): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045401.781:21712): pid=25873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045401.781:21713): pid=25873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045401.782:21714): pid=25873 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=435 res=1 >type=USER_START msg=audit(1538045401.838:21715): pid=25873 uid=0 auid=163 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045401.839:21716): pid=25873 uid=0 auid=163 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=NETFILTER_CFG msg=audit(1538045402.387:21717): table=filter family=2 entries=58 >type=SYSCALL msg=audit(1538045402.387:21717): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ade30 items=0 ppid=470 pid=25887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045402.387:21717): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045402.414:21718): table=filter family=10 entries=35 >type=SYSCALL msg=audit(1538045402.414:21718): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=e275e0 items=0 ppid=470 pid=25889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045402.414:21718): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=CRED_DISP msg=audit(1538045404.515:21719): pid=25873 uid=0 auid=163 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045404.535:21720): pid=25873 uid=0 auid=163 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045404.817:21721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045404.817:21722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045404.820:21723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045404.850:21724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045406.972:21725): dev=qr-0ea388a9-c6 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045406.972:21725): arch=c000003e syscall=46 success=yes exit=76 a0=a2 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045406.972:21725): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045407.676:21726): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045407.676:21726): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1411050 items=0 ppid=8841 pid=25979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045407.676:21726): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045407.789:21727): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538045407.789:21727): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=16f53e0 items=0 ppid=8841 pid=25983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045407.789:21727): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045407.789:21728): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538045407.789:21728): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=16f6980 items=0 ppid=8841 pid=25983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045407.789:21728): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045408.354:21729): table=filter family=2 entries=60 >type=SYSCALL msg=audit(1538045408.354:21729): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=148f750 items=0 ppid=470 pid=25987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045408.354:21729): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045408.377:21730): table=filter family=10 entries=37 >type=SYSCALL msg=audit(1538045408.377:21730): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=116bfd0 items=0 ppid=470 pid=25989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045408.377:21730): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045410.068:21731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045410.068:21732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045410.072:21733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045410.093:21734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045415.317:21735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045415.317:21736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045415.320:21737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045415.339:21738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045416.342:21739): dev=qvb710e6e22-e5 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045416.342:21739): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffd6c9e3c40 a2=0 a3=7ffd6c9e3660 items=0 ppid=10687 pid=26069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045416.342:21739): proctitle=6970006C696E6B007365740071766237313065366532322D65350070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045416.381:21740): dev=qvo710e6e22-e5 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045416.381:21740): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7fff09196290 a2=0 a3=7fff09195ca0 items=0 ppid=10687 pid=26076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045416.381:21740): proctitle=6970006C696E6B007365740071766F37313065366532322D65350070726F6D697363006F6E >type=SERVICE_START msg=audit(1538045416.528:21741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045416.783:21742): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 vm-ctx=system_u:system_r:svirt_t:s0:c404,c506 img-ctx=system_u:object_r:svirt_image_t:s0:c404,c506 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045416.783:21743): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045416.801:21744): dev=tap710e6e22-e5 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045416.801:21744): arch=c000003e syscall=16 success=yes exit=0 a0=53 a1=89a2 a2=7f20e6482f60 a3=53202d2061303a61 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045416.801:21744): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045416.864:21745): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 net=fa:16:3e:a2:6a:0a path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045416.864:21746): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 net=fa:16:3e:a2:6a:0a path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045416.945:21747): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d18\x2dinstance\x2d00000011.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045416.945:21748): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d18\x2dinstance\x2d00000011.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045416.945:21749): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d18\x2dinstance\x2d00000011.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045416.946:21750): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d18\x2dinstance\x2d00000011.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045416.946:21751): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d18\x2dinstance\x2d00000011.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045416.946:21752): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d18\x2dinstance\x2d00000011.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045416.946:21753): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d18\x2dinstance\x2d00000011.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045416.946:21754): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d18\x2dinstance\x2d00000011.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045416.947:21755): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d18\x2dinstance\x2d00000011.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045416.947:21756): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d18\x2dinstance\x2d00000011.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045416.947:21757): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d18\x2dinstance\x2d00000011.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045417.232:21758): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 old-disk="?" new-disk="/var/lib/nova/instances/fd60bfe6-821e-428d-8282-648390cc0197/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045417.232:21759): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 old-net="?" new-net="fa:16:3e:a2:6a:0a" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045417.233:21760): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 old-chardev="?" new-chardev="/dev/pts/1" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045417.233:21761): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045417.233:21762): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045417.233:21763): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 vm-pid=26157 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045418.476:21764): table=filter family=2 entries=62 >type=SYSCALL msg=audit(1538045418.476:21764): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=23cc260 items=0 ppid=470 pid=26200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045418.476:21764): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045418.477:21765): table=raw family=2 entries=9 >type=SYSCALL msg=audit(1538045418.477:21765): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=23ba010 items=0 ppid=470 pid=26200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045418.477:21765): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045418.506:21766): table=filter family=10 entries=39 >type=SYSCALL msg=audit(1538045418.506:21766): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=123ece0 items=0 ppid=470 pid=26202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045418.506:21766): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045418.506:21767): table=raw family=10 entries=9 >type=SYSCALL msg=audit(1538045418.506:21767): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1231ac0 items=0 ppid=470 pid=26202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045418.506:21767): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045420.570:21768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045420.570:21769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045420.575:21770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045420.624:21771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045425.817:21772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045425.817:21773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045425.820:21774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045425.832:21775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045427.152:21776): dev=tap710e6e22-e5 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1538045427.340:21777): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000011" uuid=fd60bfe6-821e-428d-8282-648390cc0197 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045428.167:21778): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045428.167:21778): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=14a8e50 items=0 ppid=8841 pid=26292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045428.167:21778): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045428.415:21779): table=filter family=2 entries=89 >type=SYSCALL msg=audit(1538045428.415:21779): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1ea0620 items=0 ppid=470 pid=26302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045428.415:21779): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045428.415:21780): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538045428.415:21780): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1e91230 items=0 ppid=470 pid=26302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045428.415:21780): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045428.443:21781): table=filter family=10 entries=67 >type=SYSCALL msg=audit(1538045428.443:21781): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=b882e0 items=0 ppid=470 pid=26305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045428.443:21781): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045428.443:21782): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538045428.443:21782): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=b7d590 items=0 ppid=470 pid=26305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045428.443:21782): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045431.069:21783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045431.069:21784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045431.072:21785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045431.105:21786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045436.075:21787): pid=26464 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045436.075:21788): pid=26464 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045436.076:21789): pid=26464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045436.105:21790): pid=26464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045436.317:21791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045436.317:21792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045436.319:21793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045436.340:21794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045436.704:21795): pid=26464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045436.704:21796): pid=26464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045436.873:21797): pid=26474 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045436.874:21798): pid=26474 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045436.874:21799): pid=26474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045436.897:21800): pid=26474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045437.241:21801): pid=26474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045437.241:21802): pid=26474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045437.411:21803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045437.419:21804): pid=26486 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045437.420:21805): pid=26486 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045437.420:21806): pid=26486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045437.439:21807): pid=26486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045438.029:21808): pid=26486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045438.029:21809): pid=26486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045438.166:21810): pid=26496 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045438.166:21811): pid=26496 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045438.167:21812): pid=26496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045438.186:21813): pid=26496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045438.784:21814): pid=26496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045438.785:21815): pid=26496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045441.569:21816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045441.569:21817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045441.572:21818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045441.588:21819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045441.955:21820): dev=qvb710e6e22-e5 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045441.955:21820): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffd19ab63d0 a2=0 a3=7ffd19ab5de0 items=0 ppid=10687 pid=26565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045441.955:21820): proctitle=6970006C696E6B007365740071766237313065366532322D65350070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045441.992:21821): dev=qvo710e6e22-e5 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045441.992:21821): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffeedaaf350 a2=0 a3=7ffeedaaed60 items=0 ppid=10687 pid=26569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045441.992:21821): proctitle=6970006C696E6B007365740071766F37313065366532322D65350070726F6D697363006F6E >type=SERVICE_START msg=audit(1538045442.078:21822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045442.344:21823): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 vm-ctx=system_u:system_r:svirt_t:s0:c261,c317 img-ctx=system_u:object_r:svirt_image_t:s0:c261,c317 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045442.344:21824): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045442.370:21825): dev=tap710e6e22-e5 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045442.370:21825): arch=c000003e syscall=16 success=yes exit=0 a0=53 a1=89a2 a2=7f20e5c81f60 a3=53202d2061303a61 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045442.370:21825): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045442.411:21826): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 net=fa:16:3e:a2:6a:0a path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.411:21827): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 net=fa:16:3e:a2:6a:0a path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.471:21828): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d19\x2dinstance\x2d00000012.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.471:21829): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d19\x2dinstance\x2d00000012.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.471:21830): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d19\x2dinstance\x2d00000012.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.471:21831): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d19\x2dinstance\x2d00000012.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.471:21832): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d19\x2dinstance\x2d00000012.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.472:21833): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d19\x2dinstance\x2d00000012.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.472:21834): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d19\x2dinstance\x2d00000012.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.472:21835): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d19\x2dinstance\x2d00000012.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.472:21836): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d19\x2dinstance\x2d00000012.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.472:21837): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d19\x2dinstance\x2d00000012.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.473:21838): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d19\x2dinstance\x2d00000012.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045442.546:21839): table=filter family=2 entries=62 >type=SYSCALL msg=audit(1538045442.546:21839): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=adc260 items=0 ppid=470 pid=26670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045442.546:21839): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045442.547:21840): table=raw family=2 entries=9 >type=SYSCALL msg=audit(1538045442.547:21840): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=aca010 items=0 ppid=470 pid=26670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045442.547:21840): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045442.575:21841): table=filter family=10 entries=39 >type=SYSCALL msg=audit(1538045442.575:21841): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=138ece0 items=0 ppid=470 pid=26679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045442.575:21841): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045442.576:21842): table=raw family=10 entries=9 >type=SYSCALL msg=audit(1538045442.576:21842): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1381ac0 items=0 ppid=470 pid=26679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045442.576:21842): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=VIRT_RESOURCE msg=audit(1538045442.770:21843): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 old-disk="?" new-disk="/var/lib/nova/instances/3f944803-0667-40db-a088-9b8d8982e687/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.770:21844): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 old-net="?" new-net="fa:16:3e:a2:6a:0a" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.770:21845): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 old-chardev="?" new-chardev="/dev/pts/1" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.771:21846): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045442.771:21847): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045442.771:21848): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 vm-pid=26647 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045446.820:21849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045446.820:21850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045446.822:21851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045446.844:21852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045447.942:21853): dev=tap710e6e22-e5 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1538045448.121:21854): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000012" uuid=3f944803-0667-40db-a088-9b8d8982e687 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045448.425:21855): table=filter family=2 entries=89 >type=SYSCALL msg=audit(1538045448.425:21855): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=efe620 items=0 ppid=470 pid=26802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045448.425:21855): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045448.425:21856): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538045448.425:21856): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=eef230 items=0 ppid=470 pid=26802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045448.425:21856): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045448.448:21857): table=filter family=10 entries=67 >type=SYSCALL msg=audit(1538045448.448:21857): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=22e12e0 items=0 ppid=470 pid=26804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045448.448:21857): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045448.448:21858): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538045448.448:21858): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=22d6590 items=0 ppid=470 pid=26804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045448.448:21858): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045452.069:21859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045452.069:21860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045452.072:21861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045452.099:21862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045457.317:21863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045457.317:21864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045457.320:21865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045457.335:21866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045457.707:21867): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045457.707:21867): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=df9c40 items=0 ppid=8841 pid=26853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045457.707:21867): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_STOP msg=audit(1538045458.406:21868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045461.558:21869): pid=26872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045461.558:21870): pid=26872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045461.560:21871): pid=26872 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=436 res=1 >type=USER_START msg=audit(1538045461.610:21872): pid=26872 uid=0 auid=163 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045461.611:21873): pid=26872 uid=0 auid=163 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=NETFILTER_CFG msg=audit(1538045462.368:21874): table=filter family=2 entries=62 >type=SYSCALL msg=audit(1538045462.368:21874): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ba3040 items=0 ppid=470 pid=26886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045462.368:21874): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045462.395:21875): table=filter family=10 entries=39 >type=SYSCALL msg=audit(1538045462.395:21875): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2680990 items=0 ppid=470 pid=26888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045462.395:21875): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045462.568:21876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045462.568:21877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045462.572:21878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045462.587:21879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045463.776:21880): dev=qr-0ea388a9-c6 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045463.776:21880): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045463.776:21880): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045464.031:21881): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538045464.031:21881): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9c9fd0 items=0 ppid=8841 pid=26906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045464.031:21881): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045464.031:21882): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045464.031:21882): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9caff0 items=0 ppid=8841 pid=26906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045464.031:21882): proctitle=69707461626C65732D726573746F7265002D6E >type=CRED_DISP msg=audit(1538045464.326:21883): pid=26872 uid=0 auid=163 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045464.330:21884): pid=26872 uid=0 auid=163 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045465.899:21885): dev=tapb058b460-ee prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045465.899:21885): arch=c000003e syscall=46 success=yes exit=32 a0=a2 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045465.899:21885): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045466.381:21886): table=filter family=2 entries=60 >type=SYSCALL msg=audit(1538045466.381:21886): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1905720 items=0 ppid=470 pid=26919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045466.381:21886): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045466.403:21887): table=filter family=10 entries=37 >type=SYSCALL msg=audit(1538045466.403:21887): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=ad4fa0 items=0 ppid=470 pid=26921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045466.403:21887): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045467.818:21888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045467.818:21889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045467.820:21890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045467.834:21891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045469.206:21892): dev=qg-9860bab4-e9 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045469.206:21892): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045469.206:21892): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045470.370:21893): table=filter family=2 entries=58 >type=SYSCALL msg=audit(1538045470.370:21893): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=14dbe00 items=0 ppid=470 pid=26946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045470.370:21893): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045470.389:21894): table=filter family=10 entries=35 >type=SYSCALL msg=audit(1538045470.389:21894): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=b765b0 items=0 ppid=470 pid=26948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045470.389:21894): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045473.067:21895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045473.067:21896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045473.071:21897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045473.085:21898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045478.317:21899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045478.317:21900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045478.319:21901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045478.330:21902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045479.587:21903): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045479.587:21903): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045479.587:21903): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045479.587:21903): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045479.587:21903): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045479.587:21903): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045479.587:21903): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045479.587:21903): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=26970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045479.587:21903): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538045479.844:21904): dev=qg-c8d10837-91 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045479.844:21904): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045479.844:21904): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045480.372:21905): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045480.372:21905): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f3d7b0 items=0 ppid=8841 pid=27025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.372:21905): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.373:21906): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045480.373:21906): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f3f8a0 items=0 ppid=8841 pid=27025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.373:21906): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.375:21907): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045480.375:21907): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f40f60 items=0 ppid=8841 pid=27025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.375:21907): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.375:21908): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045480.375:21908): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f406b0 items=0 ppid=8841 pid=27025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.375:21908): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.408:21909): table=filter family=2 entries=56 >type=SYSCALL msg=audit(1538045480.408:21909): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=b32510 items=0 ppid=470 pid=27028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.408:21909): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.428:21910): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538045480.428:21910): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=137fad0 items=0 ppid=8841 pid=27030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.428:21910): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.429:21911): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538045480.429:21911): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1380c50 items=0 ppid=8841 pid=27030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.429:21911): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.429:21912): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538045480.429:21912): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1380c50 items=0 ppid=8841 pid=27030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.429:21912): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.434:21913): table=filter family=10 entries=33 >type=SYSCALL msg=audit(1538045480.434:21913): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=d51bf0 items=0 ppid=470 pid=27031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.434:21913): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.517:21914): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538045480.517:21914): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1076a60 items=0 ppid=8841 pid=27034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.517:21914): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.586:21915): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045480.586:21915): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045480.586:21915): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045480.586:21915): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045480.586:21915): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045480.586:21915): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045480.586:21915): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045480.586:21915): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f36cd592578 a2=0 a3=7ffdecffd9b0 items=0 ppid=8830 pid=27037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.586:21915): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=NETFILTER_CFG msg=audit(1538045480.608:21916): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538045480.608:21916): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9c2ba0 items=0 ppid=8841 pid=27040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.608:21916): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.609:21917): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538045480.609:21917): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9c4af0 items=0 ppid=8841 pid=27040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.609:21917): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.609:21918): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1538045480.609:21918): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9c4af0 items=0 ppid=8841 pid=27040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.609:21918): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045480.772:21919): dev=tap7f70d25b-01 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045480.772:21919): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.772:21919): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045480.964:21920): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045480.964:21920): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b76640 items=0 ppid=8795 pid=27079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.964:21920): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.966:21921): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045480.966:21921): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b78d20 items=0 ppid=8795 pid=27079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.966:21921): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.966:21922): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045480.966:21922): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b79700 items=0 ppid=8795 pid=27079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.966:21922): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045480.966:21923): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045480.966:21923): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b78d20 items=0 ppid=8795 pid=27079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045480.966:21923): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045482.440:21924): table=filter family=2 entries=58 >type=SYSCALL msg=audit(1538045482.440:21924): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8dbe30 items=0 ppid=470 pid=27107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045482.440:21924): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045482.468:21925): table=filter family=10 entries=35 >type=SYSCALL msg=audit(1538045482.468:21925): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=241c5e0 items=0 ppid=470 pid=27112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045482.468:21925): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045483.568:21926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045483.568:21927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045483.570:21928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045483.585:21929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045487.484:21930): dev=qr-e7b50517-51 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045487.484:21930): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045487.484:21930): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045488.261:21931): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045488.261:21931): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=14c7050 items=0 ppid=8841 pid=27193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045488.261:21931): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045488.381:21932): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538045488.381:21932): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=239d3e0 items=0 ppid=8841 pid=27197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045488.381:21932): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045488.381:21933): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538045488.381:21933): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=239e980 items=0 ppid=8841 pid=27197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045488.381:21933): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045488.411:21934): table=filter family=2 entries=60 >type=SYSCALL msg=audit(1538045488.411:21934): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ff5750 items=0 ppid=470 pid=27200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045488.411:21934): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045488.433:21935): table=filter family=10 entries=37 >type=SYSCALL msg=audit(1538045488.433:21935): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1832fd0 items=0 ppid=470 pid=27202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045488.433:21935): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045488.819:21936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045488.819:21937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045488.822:21938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045488.842:21939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045494.068:21940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045494.068:21941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045494.071:21942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045494.089:21943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045496.048:21944): pid=27290 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045496.049:21945): pid=27290 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045496.050:21946): pid=27290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045496.084:21947): pid=27290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045496.689:21948): pid=27290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045496.689:21949): pid=27290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045496.856:21950): pid=27302 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045496.857:21951): pid=27302 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045496.857:21952): pid=27302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045496.879:21953): pid=27302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045497.429:21954): pid=27302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045497.429:21955): pid=27302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045497.594:21956): pid=27313 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045497.595:21957): pid=27313 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045497.596:21958): pid=27313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045497.632:21959): pid=27313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045498.197:21960): pid=27313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045498.198:21961): pid=27313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045498.381:21962): pid=27327 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045498.381:21963): pid=27327 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045498.382:21964): pid=27327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045498.401:21965): pid=27327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045498.938:21966): pid=27327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045498.938:21967): pid=27327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045499.071:21968): dev=qvb21bb095a-5b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045499.071:21968): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffd0f40ab30 a2=0 a3=7ffd0f40a560 items=0 ppid=10687 pid=27380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045499.071:21968): proctitle=6970006C696E6B007365740071766232316262303935612D35620070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045499.111:21969): dev=qvo21bb095a-5b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045499.111:21969): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffec8431580 a2=0 a3=7ffec8430fa0 items=0 ppid=10687 pid=27383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045499.111:21969): proctitle=6970006C696E6B007365740071766F32316262303935612D35620070726F6D697363006F6E >type=SERVICE_START msg=audit(1538045499.147:21970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045499.147:21971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045499.148:21972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045499.174:21973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045499.185:21974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045499.560:21975): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 vm-ctx=system_u:system_r:svirt_t:s0:c475,c835 img-ctx=system_u:object_r:svirt_image_t:s0:c475,c835 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045499.560:21976): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045499.579:21977): dev=tap21bb095a-5b prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045499.579:21977): arch=c000003e syscall=16 success=yes exit=0 a0=53 a1=89a2 a2=7f20e5c81f60 a3=53202d2062663a64 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045499.579:21977): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045499.632:21978): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 net=fa:16:3e:2f:1d:fb path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.632:21979): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 net=fa:16:3e:2f:1d:fb path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.686:21980): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d20\x2dinstance\x2d00000013.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.686:21981): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d20\x2dinstance\x2d00000013.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.686:21982): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d20\x2dinstance\x2d00000013.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.687:21983): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d20\x2dinstance\x2d00000013.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.687:21984): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d20\x2dinstance\x2d00000013.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.687:21985): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d20\x2dinstance\x2d00000013.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.687:21986): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d20\x2dinstance\x2d00000013.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.687:21987): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d20\x2dinstance\x2d00000013.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.687:21988): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d20\x2dinstance\x2d00000013.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.688:21989): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d20\x2dinstance\x2d00000013.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.688:21990): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d20\x2dinstance\x2d00000013.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.897:21991): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 old-disk="?" new-disk="/var/lib/nova/instances/055c464f-2141-4307-b073-c7c45fdf75b0/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.897:21992): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 old-net="?" new-net="fa:16:3e:2f:1d:fb" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.897:21993): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 old-chardev="?" new-chardev="/dev/pts/1" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.897:21994): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045499.898:21995): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045499.898:21996): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 vm-pid=27453 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045500.452:21997): table=filter family=2 entries=62 >type=SYSCALL msg=audit(1538045500.452:21997): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f01830 items=0 ppid=470 pid=27492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045500.452:21997): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045500.453:21998): table=raw family=2 entries=9 >type=SYSCALL msg=audit(1538045500.453:21998): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1eef010 items=0 ppid=470 pid=27492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045500.453:21998): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045500.478:21999): table=filter family=10 entries=39 >type=SYSCALL msg=audit(1538045500.478:21999): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=24024f0 items=0 ppid=470 pid=27494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045500.478:21999): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045500.478:22000): table=raw family=10 entries=9 >type=SYSCALL msg=audit(1538045500.478:22000): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=23f5010 items=0 ppid=470 pid=27494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045500.478:22000): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045504.319:22001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045504.319:22002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045504.323:22003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045504.352:22004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045509.568:22005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045509.568:22006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045509.572:22007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045509.584:22008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045510.055:22009): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045510.055:22009): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1be6e50 items=0 ppid=8841 pid=27559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045510.055:22009): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_STOP msg=audit(1538045510.411:22010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045514.675:22011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045514.675:22012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045514.677:22013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045514.688:22014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045519.817:22015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045519.817:22016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045519.819:22017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045519.829:22018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045521.353:22019): pid=27597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045521.354:22020): pid=27597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045521.355:22021): pid=27597 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=437 res=1 >type=USER_START msg=audit(1538045521.405:22022): pid=27597 uid=0 auid=163 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045521.406:22023): pid=27597 uid=0 auid=163 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1538045524.854:22024): pid=27597 uid=0 auid=163 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045524.857:22025): pid=27597 uid=0 auid=163 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045524.858:22026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045524.858:22027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045524.860:22028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045524.877:22029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045530.067:22030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045530.067:22031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045530.069:22032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045530.079:22033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045535.317:22034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045535.317:22035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045535.319:22036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045535.333:22037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045540.567:22038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045540.567:22039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045540.568:22040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045540.577:22041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045541.565:22042): dev=qr-e7b50517-51 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045541.565:22042): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045541.565:22042): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538045541.710:22043): dev=qg-c8d10837-91 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045541.710:22043): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045541.710:22043): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045542.397:22044): table=filter family=2 entries=92 >type=SYSCALL msg=audit(1538045542.397:22044): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=218caa0 items=0 ppid=470 pid=27681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045542.397:22044): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045542.412:22045): table=filter family=10 entries=68 >type=SYSCALL msg=audit(1538045542.412:22045): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=193a430 items=0 ppid=470 pid=27683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045542.412:22045): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045544.298:22046): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045544.298:22046): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045544.298:22046): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045544.298:22046): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045544.298:22046): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045544.298:22046): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045544.298:22046): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045544.298:22046): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=27689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045544.298:22046): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538045544.529:22047): dev=qr-e7b50517-51 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045544.529:22047): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045544.529:22047): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538045544.889:22048): dev=qg-c8d10837-91 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045544.889:22048): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045544.889:22048): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045545.438:22049): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045545.438:22049): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f107b0 items=0 ppid=8841 pid=27777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045545.438:22049): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045545.439:22050): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045545.439:22050): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f128a0 items=0 ppid=8841 pid=27777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045545.439:22050): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045545.440:22051): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045545.440:22051): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f14830 items=0 ppid=8841 pid=27777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045545.440:22051): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045545.440:22052): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045545.440:22052): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=f13f80 items=0 ppid=8841 pid=27777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045545.440:22052): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045545.485:22053): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538045545.485:22053): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=719ad0 items=0 ppid=8841 pid=27779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045545.485:22053): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045545.486:22054): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538045545.486:22054): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=71ac50 items=0 ppid=8841 pid=27779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045545.486:22054): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045545.486:22055): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538045545.486:22055): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=71ac50 items=0 ppid=8841 pid=27779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045545.486:22055): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045545.707:22056): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538045545.707:22056): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1358030 items=0 ppid=8841 pid=27786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045545.707:22056): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045545.707:22057): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538045545.707:22057): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1359710 items=0 ppid=8841 pid=27786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045545.707:22057): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045545.793:22058): table=filter family=2 entries=24 >type=SYSCALL msg=audit(1538045545.793:22058): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1025d80 items=0 ppid=8841 pid=27789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045545.793:22058): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045545.794:22059): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538045545.794:22059): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1027c80 items=0 ppid=8841 pid=27789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045545.794:22059): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045545.794:22060): table=nat family=2 entries=29 >type=SYSCALL msg=audit(1538045545.794:22060): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1027c80 items=0 ppid=8841 pid=27789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045545.794:22060): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045545.817:22061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045545.817:22062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045545.820:22063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045545.838:22064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045546.495:22065): table=filter family=2 entries=88 >type=SYSCALL msg=audit(1538045546.495:22065): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=25b9d70 items=0 ppid=470 pid=27797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045546.495:22065): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045546.525:22066): table=filter family=10 entries=64 >type=SYSCALL msg=audit(1538045546.525:22066): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1e8d5c0 items=0 ppid=470 pid=27799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045546.525:22066): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045549.723:22067): dev=tap21bb095a-5b prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SERVICE_START msg=audit(1538045549.758:22068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045549.888:22069): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000013" uuid=055c464f-2141-4307-b073-c7c45fdf75b0 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045550.579:22070): table=filter family=2 entries=92 >type=SYSCALL msg=audit(1538045550.579:22070): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9afaa0 items=0 ppid=470 pid=27906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045550.579:22070): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045550.579:22071): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538045550.579:22071): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=9a0230 items=0 ppid=470 pid=27906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045550.579:22071): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045550.605:22072): table=filter family=10 entries=68 >type=SYSCALL msg=audit(1538045550.605:22072): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=e1c430 items=0 ppid=470 pid=27909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045550.605:22072): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045550.605:22073): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538045550.605:22073): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=e11590 items=0 ppid=470 pid=27909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045550.605:22073): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045551.070:22074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045551.070:22075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045551.073:22076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045551.078:22077): table=mangle family=2 entries=40 >type=SYSCALL msg=audit(1538045551.078:22077): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=15bf1d0 items=0 ppid=8841 pid=27938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045551.078:22077): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045551.079:22078): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045551.079:22078): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=15bec40 items=0 ppid=8841 pid=27938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045551.079:22078): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_STOP msg=audit(1538045551.091:22079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045556.029:22080): pid=28142 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045556.030:22081): pid=28142 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045556.031:22082): pid=28142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045556.060:22083): pid=28142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045556.318:22084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045556.318:22085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045556.321:22086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045556.342:22087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045556.419:22088): table=filter family=2 entries=62 >type=SYSCALL msg=audit(1538045556.419:22088): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2025040 items=0 ppid=470 pid=28151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045556.419:22088): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045556.440:22089): table=filter family=10 entries=39 >type=SYSCALL msg=audit(1538045556.440:22089): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=18a0990 items=0 ppid=470 pid=28153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045556.440:22089): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045556.658:22090): pid=28142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045556.658:22091): pid=28142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045556.818:22092): pid=28158 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045556.819:22093): pid=28158 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045556.819:22094): pid=28158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045556.833:22095): pid=28158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045557.402:22096): pid=28158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045557.402:22097): pid=28158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045557.572:22098): pid=28169 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045557.572:22099): pid=28169 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045557.573:22100): pid=28169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045557.590:22101): pid=28169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045558.156:22102): pid=28169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045558.156:22103): pid=28169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045558.290:22104): pid=28178 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045558.291:22105): pid=28178 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045558.291:22106): pid=28178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045558.300:22107): pid=28178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045558.844:22108): pid=28178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045558.845:22109): pid=28178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045559.470:22110): dev=qr-e7b50517-51 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045559.470:22110): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045559.470:22110): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045559.724:22111): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538045559.724:22111): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=b76fd0 items=0 ppid=8841 pid=28197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045559.724:22111): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045559.725:22112): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045559.725:22112): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=b77ff0 items=0 ppid=8841 pid=28197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045559.725:22112): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045560.230:22113): dev=tap7f70d25b-01 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045560.230:22113): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045560.230:22113): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=SERVICE_STOP msg=audit(1538045560.405:22114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045560.471:22115): table=filter family=2 entries=60 >type=SYSCALL msg=audit(1538045560.471:22115): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1556720 items=0 ppid=470 pid=28204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045560.471:22115): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045560.495:22116): table=filter family=10 entries=37 >type=SYSCALL msg=audit(1538045560.495:22116): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=166cfa0 items=0 ppid=470 pid=28206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045560.495:22116): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045561.567:22117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045561.567:22118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045561.569:22119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045561.584:22120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045562.435:22121): table=filter family=2 entries=58 >type=SYSCALL msg=audit(1538045562.435:22121): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1a32e00 items=0 ppid=470 pid=28213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045562.435:22121): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045562.458:22122): table=filter family=10 entries=35 >type=SYSCALL msg=audit(1538045562.458:22122): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=16a15b0 items=0 ppid=470 pid=28215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045562.458:22122): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045562.683:22123): dev=qg-c8d10837-91 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045562.683:22123): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045562.683:22123): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=SERVICE_START msg=audit(1538045566.817:22124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045566.817:22125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045566.820:22126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045566.835:22127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045572.068:22128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045572.068:22129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045572.070:22130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045572.080:22131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045572.582:22132): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045572.582:22132): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045572.582:22132): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045572.582:22132): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045572.582:22132): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045572.582:22132): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045572.582:22132): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045572.582:22132): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=28284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045572.582:22132): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538045572.964:22133): dev=qg-8b57accb-80 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045572.964:22133): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045572.964:22133): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045573.679:22134): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045573.679:22134): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=cd57b0 items=0 ppid=8841 pid=28339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045573.679:22134): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045573.680:22135): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045573.681:22136): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045573.681:22136): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=cd78a0 items=0 ppid=8841 pid=28339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045573.681:22136): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045573.682:22137): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045573.682:22137): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=cd8f60 items=0 ppid=8841 pid=28339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045573.682:22137): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045573.682:22138): table=raw family=2 entries=3 >type=NETFILTER_CFG msg=audit(1538045573.680:22135): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1538045573.682:22138): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=cd86b0 items=0 ppid=8841 pid=28339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045573.682:22138): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045573.680:22135): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045573.680:22135): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045573.680:22135): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045573.680:22135): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045573.680:22135): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045573.680:22135): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f36cd592578 a2=0 a3=7ffdecffd9b0 items=0 ppid=8830 pid=28340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045573.680:22135): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=NETFILTER_CFG msg=audit(1538045573.735:22139): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538045573.735:22139): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=10d0ad0 items=0 ppid=8841 pid=28348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045573.735:22139): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045573.735:22140): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538045573.735:22140): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=10d1c50 items=0 ppid=8841 pid=28348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045573.735:22140): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045573.736:22141): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538045573.736:22141): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=10d1c50 items=0 ppid=8841 pid=28348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045573.736:22141): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045573.815:22142): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538045573.815:22142): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=b21a60 items=0 ppid=8841 pid=28358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045573.815:22142): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045573.854:22143): dev=tap66665816-d3 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045573.854:22143): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045573.854:22143): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045573.930:22144): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538045573.930:22144): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=756ba0 items=0 ppid=8841 pid=28379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045573.930:22144): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045573.931:22145): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538045573.931:22145): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=758af0 items=0 ppid=8841 pid=28379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045573.931:22145): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045573.931:22146): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1538045573.931:22146): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=758af0 items=0 ppid=8841 pid=28379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045573.931:22146): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045574.032:22147): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045574.032:22147): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1008640 items=0 ppid=8795 pid=28392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045574.032:22147): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045574.034:22148): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045574.034:22148): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=100ad20 items=0 ppid=8795 pid=28392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045574.034:22148): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045574.034:22149): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045574.034:22149): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=100b700 items=0 ppid=8795 pid=28392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045574.034:22149): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045574.034:22150): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045574.034:22150): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=100ad20 items=0 ppid=8795 pid=28392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045574.034:22150): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045574.481:22151): table=filter family=2 entries=56 >type=SYSCALL msg=audit(1538045574.481:22151): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=25b59f0 items=0 ppid=470 pid=28404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045574.481:22151): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045574.503:22152): table=filter family=10 entries=33 >type=SYSCALL msg=audit(1538045574.503:22152): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1a21130 items=0 ppid=470 pid=28406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045574.503:22152): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045577.319:22153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045577.319:22154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045577.322:22155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045577.337:22156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045579.470:22157): dev=qr-a65053fe-49 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045579.470:22157): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045579.470:22157): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045580.193:22158): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045580.193:22158): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1f22050 items=0 ppid=8841 pid=28504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045580.193:22158): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045580.321:22159): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538045580.321:22159): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=108e3e0 items=0 ppid=8841 pid=28508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045580.321:22159): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045580.321:22160): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538045580.321:22160): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=108f980 items=0 ppid=8841 pid=28508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045580.321:22160): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045580.461:22161): table=filter family=2 entries=60 >type=SYSCALL msg=audit(1538045580.461:22161): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=245c750 items=0 ppid=470 pid=28511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045580.461:22161): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045580.480:22162): table=filter family=10 entries=37 >type=SYSCALL msg=audit(1538045580.480:22162): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=12befd0 items=0 ppid=470 pid=28513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045580.480:22162): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045581.878:22163): pid=28518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045581.878:22164): pid=28518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045581.880:22165): pid=28518 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=438 res=1 >type=USER_START msg=audit(1538045581.926:22166): pid=28518 uid=0 auid=163 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045581.926:22167): pid=28518 uid=0 auid=163 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045582.567:22168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045582.567:22169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045582.591:22170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045582.611:22171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRED_DISP msg=audit(1538045584.695:22172): pid=28518 uid=0 auid=163 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045584.699:22173): pid=28518 uid=0 auid=163 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045587.819:22174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045587.819:22175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045587.821:22176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045587.844:22177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045591.485:22178): dev=qvbc7feece5-22 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045591.485:22178): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffcb66c8c90 a2=0 a3=7ffcb66c86a0 items=0 ppid=10687 pid=28614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045591.485:22178): proctitle=6970006C696E6B007365740071766263376665656365352D32320070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045591.518:22179): dev=qvoc7feece5-22 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045591.518:22179): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffcf300a450 a2=0 a3=7ffcf3009e60 items=0 ppid=10687 pid=28621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045591.518:22179): proctitle=6970006C696E6B007365740071766F63376665656365352D32320070726F6D697363006F6E >type=SERVICE_START msg=audit(1538045591.600:22180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045591.975:22181): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e vm-ctx=system_u:system_r:svirt_t:s0:c315,c542 img-ctx=system_u:object_r:svirt_image_t:s0:c315,c542 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045591.975:22182): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045591.996:22183): dev=tapc7feece5-22 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045591.996:22183): arch=c000003e syscall=16 success=yes exit=0 a0=53 a1=89a2 a2=7f20e6482f60 a3=53202d2032363a39 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045591.996:22183): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045592.037:22184): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e net=fa:16:3e:89:49:62 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.037:22185): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e net=fa:16:3e:89:49:62 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.089:22186): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d21\x2dinstance\x2d00000014.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.089:22187): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d21\x2dinstance\x2d00000014.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.090:22188): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d21\x2dinstance\x2d00000014.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.090:22189): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d21\x2dinstance\x2d00000014.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.090:22190): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d21\x2dinstance\x2d00000014.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.090:22191): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d21\x2dinstance\x2d00000014.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.090:22192): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d21\x2dinstance\x2d00000014.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.090:22193): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d21\x2dinstance\x2d00000014.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.091:22194): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d21\x2dinstance\x2d00000014.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.091:22195): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d21\x2dinstance\x2d00000014.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.091:22196): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d21\x2dinstance\x2d00000014.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.376:22197): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e old-disk="?" new-disk="/var/lib/nova/instances/87c21597-7bb1-4c9e-8d0a-fc635dca073e/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.376:22198): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e old-net="?" new-net="fa:16:3e:89:49:62" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.376:22199): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e old-chardev="?" new-chardev="/dev/pts/1" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.376:22200): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045592.376:22201): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045592.376:22202): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e vm-pid=28697 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045592.568:22203): table=filter family=2 entries=62 >type=SYSCALL msg=audit(1538045592.568:22203): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10b87a0 items=0 ppid=470 pid=28731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045592.568:22203): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045592.569:22204): table=raw family=2 entries=9 >type=SYSCALL msg=audit(1538045592.569:22204): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10a6010 items=0 ppid=470 pid=28731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045592.569:22204): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045592.599:22205): table=filter family=10 entries=39 >type=SYSCALL msg=audit(1538045592.599:22205): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=cb74f0 items=0 ppid=470 pid=28734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045592.599:22205): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045592.599:22206): table=raw family=10 entries=9 >type=SYSCALL msg=audit(1538045592.599:22206): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=caa010 items=0 ppid=470 pid=28734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045592.599:22206): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045593.074:22207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045593.074:22208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045593.078:22209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045593.112:22210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045598.317:22211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045598.317:22212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045598.320:22213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045598.334:22214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045600.524:22215): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045600.524:22215): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2202e50 items=0 ppid=8841 pid=28767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045600.524:22215): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_STOP msg=audit(1538045602.408:22216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045603.567:22217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045603.567:22218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045603.570:22219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045603.579:22220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045608.817:22221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045608.817:22222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045608.819:22223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045608.829:22224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045614.068:22225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045614.068:22226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045614.071:22227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045614.089:22228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045616.032:22229): pid=28876 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045616.033:22230): pid=28876 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045616.033:22231): pid=28876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045616.060:22232): pid=28876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045616.366:22233): pid=28876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045616.366:22234): pid=28876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045616.533:22235): pid=28885 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045616.533:22236): pid=28885 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045616.534:22237): pid=28885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045616.556:22238): pid=28885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045616.787:22239): pid=28885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045616.787:22240): pid=28885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045616.908:22241): pid=28893 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045616.908:22242): pid=28893 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045616.909:22243): pid=28893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045616.923:22244): pid=28893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045617.492:22245): pid=28893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045617.492:22246): pid=28893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045617.671:22247): pid=28904 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045617.671:22248): pid=28904 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045617.672:22249): pid=28904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045617.692:22250): pid=28904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045618.262:22251): pid=28904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045618.262:22252): pid=28904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045619.318:22253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045619.318:22254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045619.320:22255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045619.349:22256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045624.567:22257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045624.567:22258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045624.570:22259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045624.585:22260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045629.817:22261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045629.817:22262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045629.818:22263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045629.828:22264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045635.067:22265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045635.067:22266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045635.070:22267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045635.083:22268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045640.318:22269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045640.318:22270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045640.320:22271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045640.328:22272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045641.724:22273): pid=29064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045641.724:22274): pid=29064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045641.725:22275): pid=29064 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=439 res=1 >type=USER_START msg=audit(1538045641.767:22276): pid=29064 uid=0 auid=163 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045641.768:22277): pid=29064 uid=0 auid=163 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1538045644.698:22278): pid=29064 uid=0 auid=163 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045644.701:22279): pid=29064 uid=0 auid=163 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045645.567:22280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045645.568:22281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045645.570:22282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045645.586:22283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045649.911:22284): dev=tapc7feece5-22 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SERVICE_START msg=audit(1538045650.036:22285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045650.090:22286): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000014" uuid=87c21597-7bb1-4c9e-8d0a-fc635dca073e vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045650.600:22287): table=filter family=2 entries=92 >type=SYSCALL msg=audit(1538045650.600:22287): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=c00aa0 items=0 ppid=470 pid=29198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045650.600:22287): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045650.600:22288): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538045650.600:22288): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bf1230 items=0 ppid=470 pid=29198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045650.600:22288): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045650.605:22289): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045650.605:22289): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2430c40 items=0 ppid=8841 pid=29197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045650.605:22289): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045650.618:22290): table=filter family=10 entries=68 >type=SYSCALL msg=audit(1538045650.618:22290): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1f98430 items=0 ppid=470 pid=29200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045650.618:22290): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045650.619:22291): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538045650.619:22291): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1f8d590 items=0 ppid=470 pid=29200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045650.619:22291): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045650.819:22292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045650.819:22293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045650.823:22294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045650.863:22295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045654.477:22296): table=filter family=2 entries=62 >type=SYSCALL msg=audit(1538045654.477:22296): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=183a040 items=0 ppid=470 pid=29235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045654.477:22296): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045654.496:22297): table=filter family=10 entries=39 >type=SYSCALL msg=audit(1538045654.496:22297): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1d1c990 items=0 ppid=470 pid=29237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045654.496:22297): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045656.067:22298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045656.068:22299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045656.071:22300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045656.083:22301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045656.673:22302): dev=qr-a65053fe-49 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045656.673:22302): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045656.673:22302): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045656.888:22303): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538045656.888:22303): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=238efd0 items=0 ppid=8841 pid=29259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045656.888:22303): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045656.888:22304): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045656.888:22304): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=238fff0 items=0 ppid=8841 pid=29259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045656.888:22304): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045658.749:22305): dev=tap66665816-d3 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045658.749:22305): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045658.749:22305): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538045659.486:22306): dev=qg-8b57accb-80 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045659.486:22306): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045659.486:22306): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=SERVICE_STOP msg=audit(1538045660.405:22307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045660.510:22308): table=filter family=2 entries=60 >type=SYSCALL msg=audit(1538045660.510:22308): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=114d720 items=0 ppid=470 pid=29287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045660.510:22308): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045660.533:22309): table=filter family=10 entries=37 >type=SYSCALL msg=audit(1538045660.533:22309): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=20c5fa0 items=0 ppid=470 pid=29289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045660.533:22309): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045661.318:22310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045661.318:22311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045661.321:22312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045661.334:22313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045666.567:22314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045666.567:22315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045666.569:22316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045666.579:22317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045668.476:22318): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045668.476:22318): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045668.476:22318): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045668.476:22318): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045668.476:22318): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045668.476:22318): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045668.476:22318): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045668.476:22318): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=29305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045668.476:22318): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538045668.733:22319): dev=qg-00c955c6-80 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045668.733:22319): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045668.733:22319): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045669.221:22320): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045669.221:22320): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=ba97b0 items=0 ppid=8841 pid=29364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.221:22320): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.222:22321): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045669.222:22321): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bab8a0 items=0 ppid=8841 pid=29364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.222:22321): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.223:22322): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045669.223:22322): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bacf60 items=0 ppid=8841 pid=29364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.223:22322): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.223:22323): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045669.223:22323): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bac6b0 items=0 ppid=8841 pid=29364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.223:22323): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.281:22324): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538045669.281:22324): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1f48ad0 items=0 ppid=8841 pid=29366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.281:22324): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.281:22325): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538045669.281:22325): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1f49c50 items=0 ppid=8841 pid=29366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.281:22325): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.282:22326): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538045669.282:22326): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1f49c50 items=0 ppid=8841 pid=29366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.282:22326): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.365:22327): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538045669.365:22327): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=15aea60 items=0 ppid=8841 pid=29369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.365:22327): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.434:22328): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538045669.434:22328): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8f8ba0 items=0 ppid=8841 pid=29372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.434:22328): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.434:22329): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538045669.434:22329): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8faaf0 items=0 ppid=8841 pid=29372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.434:22329): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.434:22330): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1538045669.434:22330): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=8faaf0 items=0 ppid=8841 pid=29372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.434:22330): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.441:22331): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045669.441:22331): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045669.441:22331): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045669.441:22331): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045669.441:22331): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045669.441:22331): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045669.441:22331): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045669.441:22331): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f36cd592578 a2=0 a3=7ffdecffd9b0 items=0 ppid=8830 pid=29373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.441:22331): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538045669.633:22332): dev=tap902b9a83-46 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045669.633:22332): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.633:22332): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045669.797:22333): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045669.797:22333): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1476640 items=0 ppid=8795 pid=29415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.797:22333): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.799:22334): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045669.799:22334): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1478d20 items=0 ppid=8795 pid=29415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.799:22334): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.799:22335): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045669.799:22335): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1479700 items=0 ppid=8795 pid=29415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.799:22335): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045669.799:22336): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045669.799:22336): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1478d20 items=0 ppid=8795 pid=29415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045669.799:22336): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045670.600:22337): table=filter family=2 entries=56 >type=SYSCALL msg=audit(1538045670.600:22337): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=25a89f0 items=0 ppid=470 pid=29444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045670.600:22337): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045670.624:22338): table=filter family=10 entries=33 >type=SYSCALL msg=audit(1538045670.624:22338): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=163f130 items=0 ppid=470 pid=29447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045670.624:22338): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045671.819:22339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045671.819:22340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045671.824:22341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045671.860:22342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045675.613:22343): dev=qr-bf62fc5d-93 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045675.613:22343): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045675.613:22343): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_ACCT msg=audit(1538045676.091:22344): pid=29546 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045676.092:22345): pid=29546 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045676.092:22346): pid=29546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045676.127:22347): pid=29546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045676.391:22348): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045676.391:22348): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2132050 items=0 ppid=8841 pid=29566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045676.391:22348): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045676.514:22349): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538045676.514:22349): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=18683e0 items=0 ppid=8841 pid=29572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045676.514:22349): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045676.514:22350): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538045676.514:22350): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1869980 items=0 ppid=8841 pid=29572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045676.514:22350): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045676.548:22351): table=filter family=2 entries=60 >type=SYSCALL msg=audit(1538045676.548:22351): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=23d3750 items=0 ppid=470 pid=29575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045676.548:22351): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045676.574:22352): table=filter family=10 entries=37 >type=SYSCALL msg=audit(1538045676.574:22352): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=2298fd0 items=0 ppid=470 pid=29577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045676.574:22352): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045676.731:22353): pid=29546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045676.731:22354): pid=29546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045676.923:22355): pid=29581 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045676.923:22356): pid=29581 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045676.923:22357): pid=29581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045676.947:22358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045676.947:22359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045676.949:22360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045676.952:22361): pid=29581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045676.982:22362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045677.519:22363): pid=29581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045677.519:22364): pid=29581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045677.693:22365): pid=29595 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045677.693:22366): pid=29595 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045677.694:22367): pid=29595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045677.717:22368): pid=29595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045678.272:22369): pid=29595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045678.272:22370): pid=29595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045678.441:22371): pid=29606 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045678.441:22372): pid=29606 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045678.442:22373): pid=29606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045678.462:22374): pid=29606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045679.010:22375): pid=29606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045679.010:22376): pid=29606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045682.067:22377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045682.067:22378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045682.070:22379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045682.096:22380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045685.674:22381): dev=qvbb19a80b0-23 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045685.674:22381): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffde3060b70 a2=0 a3=7ffde30605a0 items=0 ppid=10687 pid=29696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045685.674:22381): proctitle=6970006C696E6B007365740071766262313961383062302D32330070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045685.727:22382): dev=qvob19a80b0-23 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045685.727:22382): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffc2169f120 a2=0 a3=7ffc2169eb60 items=0 ppid=10687 pid=29699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045685.727:22382): proctitle=6970006C696E6B007365740071766F62313961383062302D32330070726F6D697363006F6E >type=SERVICE_START msg=audit(1538045685.903:22383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045686.268:22384): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe vm-ctx=system_u:system_r:svirt_t:s0:c130,c242 img-ctx=system_u:object_r:svirt_image_t:s0:c130,c242 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045686.268:22385): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045686.292:22386): dev=tapb19a80b0-23 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045686.292:22386): arch=c000003e syscall=16 success=yes exit=0 a0=53 a1=89a2 a2=7f20e447ef60 a3=53202d2039633a66 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045686.292:22386): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045686.337:22387): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe net=fa:16:3e:2d:3f:c9 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.338:22388): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe net=fa:16:3e:2d:3f:c9 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.400:22389): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d22\x2dinstance\x2d00000015.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.400:22390): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d22\x2dinstance\x2d00000015.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.401:22391): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d22\x2dinstance\x2d00000015.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.401:22392): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d22\x2dinstance\x2d00000015.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.401:22393): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d22\x2dinstance\x2d00000015.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.401:22394): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d22\x2dinstance\x2d00000015.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.402:22395): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d22\x2dinstance\x2d00000015.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.402:22396): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d22\x2dinstance\x2d00000015.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.402:22397): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d22\x2dinstance\x2d00000015.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.402:22398): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d22\x2dinstance\x2d00000015.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.402:22399): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d22\x2dinstance\x2d00000015.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.642:22400): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe old-disk="?" new-disk="/var/lib/nova/instances/274b65e2-8553-44b3-96f4-6e579d9713fe/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.642:22401): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe old-net="?" new-net="fa:16:3e:2d:3f:c9" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.642:22402): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe old-chardev="?" new-chardev="/dev/pts/1" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.643:22403): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045686.643:22404): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045686.643:22405): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe vm-pid=29769 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045686.683:22406): table=filter family=2 entries=62 >type=SYSCALL msg=audit(1538045686.683:22406): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=15547a0 items=0 ppid=470 pid=29804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045686.683:22406): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045686.684:22407): table=raw family=2 entries=9 >type=SYSCALL msg=audit(1538045686.684:22407): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1542010 items=0 ppid=470 pid=29804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045686.684:22407): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045686.713:22408): table=filter family=10 entries=39 >type=SYSCALL msg=audit(1538045686.713:22408): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=141c4f0 items=0 ppid=470 pid=29806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045686.713:22408): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045686.713:22409): table=raw family=10 entries=9 >type=SYSCALL msg=audit(1538045686.713:22409): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=140f010 items=0 ppid=470 pid=29806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045686.713:22409): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045687.320:22410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045687.320:22411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045687.323:22412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045687.361:22413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045692.567:22414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045692.567:22415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045692.571:22416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045692.586:22417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045694.165:22418): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045694.165:22418): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1e7fe50 items=0 ppid=8841 pid=29833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045694.165:22418): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_STOP msg=audit(1538045696.406:22419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045697.825:22420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045697.825:22421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045697.827:22422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045697.839:22423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045701.725:22424): pid=29906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045701.725:22425): pid=29906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045701.727:22426): pid=29906 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=440 res=1 >type=USER_START msg=audit(1538045701.784:22427): pid=29906 uid=0 auid=163 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045701.785:22428): pid=29906 uid=0 auid=163 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045702.735:22429): dev=qvb3447a970-a3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045702.735:22429): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffc4e9f8a40 a2=0 a3=7ffc4e9f8460 items=0 ppid=10687 pid=29956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045702.735:22429): proctitle=6970006C696E6B007365740071766233343437613937302D61330070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045702.768:22430): dev=qvo3447a970-a3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045702.768:22430): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffd0e859690 a2=0 a3=7ffd0e8590a0 items=0 ppid=10687 pid=29960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045702.768:22430): proctitle=6970006C696E6B007365740071766F33343437613937302D61330070726F6D697363006F6E >type=SERVICE_START msg=audit(1538045702.867:22431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045702.867:22432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045702.871:22433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045702.917:22434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045702.924:22435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045703.229:22436): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 vm-ctx=system_u:system_r:svirt_t:s0:c22,c191 img-ctx=system_u:object_r:svirt_image_t:s0:c22,c191 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045703.229:22437): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045703.256:22438): dev=tap3447a970-a3 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045703.256:22438): arch=c000003e syscall=16 success=yes exit=0 a0=54 a1=89a2 a2=7f20e447ef60 a3=53202d2062393a64 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045703.256:22438): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045703.297:22439): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 net=fa:16:3e:31:2d:9b path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.298:22440): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 net=fa:16:3e:31:2d:9b path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.376:22441): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d23\x2dinstance\x2d00000016.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.377:22442): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d23\x2dinstance\x2d00000016.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.377:22443): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d23\x2dinstance\x2d00000016.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.377:22444): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d23\x2dinstance\x2d00000016.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.377:22445): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d23\x2dinstance\x2d00000016.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.377:22446): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d23\x2dinstance\x2d00000016.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.378:22447): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d23\x2dinstance\x2d00000016.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.378:22448): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d23\x2dinstance\x2d00000016.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.378:22449): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d23\x2dinstance\x2d00000016.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.378:22450): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d23\x2dinstance\x2d00000016.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.378:22451): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d23\x2dinstance\x2d00000016.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.700:22452): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 old-disk="?" new-disk="/var/lib/nova/instances/1a10d3b9-ba86-4eeb-922f-f0cada2d9f58/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.701:22453): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 old-net="?" new-net="fa:16:3e:31:2d:9b" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.701:22454): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 old-chardev="?" new-chardev="/dev/pts/2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.701:22455): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045703.701:22456): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045703.701:22457): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 vm-pid=30036 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045704.614:22458): table=filter family=2 entries=92 >type=SYSCALL msg=audit(1538045704.614:22458): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=21dc300 items=0 ppid=470 pid=30073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045704.614:22458): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045704.614:22459): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538045704.614:22459): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=21c4ca0 items=0 ppid=470 pid=30073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045704.614:22459): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045704.664:22460): table=filter family=10 entries=68 >type=SYSCALL msg=audit(1538045704.664:22460): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=e0cf50 items=0 ppid=470 pid=30075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045704.664:22460): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045704.665:22461): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538045704.665:22461): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=dfb340 items=0 ppid=470 pid=30075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045704.665:22461): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=CRED_DISP msg=audit(1538045705.035:22462): pid=29906 uid=0 auid=163 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045705.043:22463): pid=29906 uid=0 auid=163 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045708.068:22464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045708.068:22465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045708.070:22466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045708.105:22467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045712.885:22468): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045712.885:22468): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=24f0320 items=0 ppid=8841 pid=30101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045712.885:22468): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045713.317:22469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045713.317:22470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045713.320:22471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045713.334:22472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_STOP msg=audit(1538045713.407:22473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045718.567:22474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045718.567:22475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045718.571:22476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045718.583:22477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045723.817:22478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045723.817:22479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045723.820:22480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045723.829:22481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045729.067:22482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045729.067:22483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045729.069:22484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045729.080:22485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045734.319:22486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045734.319:22487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045734.321:22488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045734.337:22489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045736.025:22490): pid=30291 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045736.026:22491): pid=30291 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045736.026:22492): pid=30291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045736.052:22493): pid=30291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045736.418:22494): pid=30291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045736.418:22495): pid=30291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045736.531:22496): pid=30299 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045736.531:22497): pid=30299 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045736.532:22498): pid=30299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045736.551:22499): pid=30299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045736.850:22500): pid=30299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045736.850:22501): pid=30299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045736.966:22502): pid=30308 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045736.966:22503): pid=30308 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045736.966:22504): pid=30308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045736.985:22505): pid=30308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045737.501:22506): pid=30308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045737.501:22507): pid=30308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045737.638:22508): pid=30318 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045737.638:22509): pid=30318 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045737.639:22510): pid=30318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045737.660:22511): pid=30318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045738.230:22512): pid=30318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045738.230:22513): pid=30318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045739.567:22514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045739.567:22515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045739.569:22516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045739.593:22517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045744.817:22518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045744.817:22519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045744.819:22520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045744.826:22521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045750.068:22522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045750.068:22523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045750.070:22524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045750.084:22525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045755.317:22526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045755.317:22527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045755.320:22528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045755.340:22529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045760.567:22530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045760.567:22531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045760.570:22532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045760.581:22533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045760.983:22534): dev=tap3447a970-a3 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SERVICE_START msg=audit(1538045761.055:22535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045761.063:22536): pid=30495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045761.064:22537): pid=30495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045761.065:22538): pid=30495 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=441 res=1 >type=USER_START msg=audit(1538045761.158:22539): pid=30495 uid=0 auid=163 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=VIRT_CONTROL msg=audit(1538045761.158:22540): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000016" uuid=1a10d3b9-ba86-4eeb-922f-f0cada2d9f58 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=CRED_REFR msg=audit(1538045761.159:22541): pid=30495 uid=0 auid=163 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=NETFILTER_CFG msg=audit(1538045762.126:22542): table=nat family=2 entries=33 >type=SYSCALL msg=audit(1538045762.126:22542): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2195100 items=0 ppid=8841 pid=30568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045762.126:22542): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045762.571:22543): table=filter family=2 entries=122 >type=SYSCALL msg=audit(1538045762.571:22543): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=c40500 items=0 ppid=470 pid=30580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045762.571:22543): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045762.572:22544): table=raw family=2 entries=15 >type=SYSCALL msg=audit(1538045762.572:22544): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=c2c820 items=0 ppid=470 pid=30580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045762.572:22544): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045762.598:22545): table=filter family=10 entries=97 >type=SYSCALL msg=audit(1538045762.598:22545): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=261fed0 items=0 ppid=470 pid=30582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045762.598:22545): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045762.599:22546): table=raw family=10 entries=15 >type=SYSCALL msg=audit(1538045762.599:22546): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=260fd70 items=0 ppid=470 pid=30582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045762.599:22546): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=CRED_DISP msg=audit(1538045763.526:22547): pid=30495 uid=0 auid=163 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045763.534:22548): pid=30495 uid=0 auid=163 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045765.818:22549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045765.818:22550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045765.821:22551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045765.854:22552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045769.931:22553): dev=tapb19a80b0-23 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1538045770.103:22554): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000015" uuid=274b65e2-8553-44b3-96f4-6e579d9713fe vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045770.625:22555): table=filter family=2 entries=92 >type=SYSCALL msg=audit(1538045770.625:22555): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1350aa0 items=0 ppid=470 pid=30682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045770.625:22555): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045770.625:22556): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538045770.625:22556): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1341230 items=0 ppid=470 pid=30682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045770.625:22556): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045770.658:22557): table=filter family=10 entries=68 >type=SYSCALL msg=audit(1538045770.658:22557): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=da9430 items=0 ppid=470 pid=30684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045770.658:22557): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045770.659:22558): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538045770.659:22558): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=d9e590 items=0 ppid=470 pid=30684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045770.659:22558): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045770.971:22559): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045770.971:22559): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2297c40 items=0 ppid=8841 pid=30690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045770.971:22559): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045771.067:22560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045771.068:22561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045771.074:22562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045771.095:22563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045776.318:22564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045776.318:22565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045776.320:22566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045776.341:22567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045778.565:22568): table=filter family=2 entries=62 >type=SYSCALL msg=audit(1538045778.565:22568): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1941040 items=0 ppid=470 pid=30734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045778.565:22568): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045778.587:22569): table=filter family=10 entries=39 >type=SYSCALL msg=audit(1538045778.587:22569): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=e07990 items=0 ppid=470 pid=30736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045778.587:22569): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_STOP msg=audit(1538045780.413:22570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045780.466:22571): dev=qr-bf62fc5d-93 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045780.466:22571): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045780.466:22571): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045780.701:22572): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538045780.701:22572): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1bf7fd0 items=0 ppid=8841 pid=30751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045780.701:22572): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045780.702:22573): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045780.702:22573): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1bf8ff0 items=0 ppid=8841 pid=30751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045780.702:22573): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045781.469:22574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045781.469:22575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045781.472:22576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045781.476:22577): dev=tap902b9a83-46 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SERVICE_STOP msg=audit(1538045781.504:22578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SYSCALL msg=audit(1538045781.476:22577): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045781.476:22577): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045782.572:22579): table=filter family=2 entries=60 >type=SYSCALL msg=audit(1538045782.572:22579): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=92d720 items=0 ppid=470 pid=30767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045782.572:22579): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045782.594:22580): table=filter family=10 entries=37 >type=SYSCALL msg=audit(1538045782.594:22580): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1a64fa0 items=0 ppid=470 pid=30769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045782.594:22580): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045782.657:22581): table=filter family=2 entries=58 >type=SYSCALL msg=audit(1538045782.657:22581): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1963e00 items=0 ppid=470 pid=30771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045782.657:22581): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045782.682:22582): table=filter family=10 entries=35 >type=SYSCALL msg=audit(1538045782.682:22582): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=8475b0 items=0 ppid=470 pid=30773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045782.682:22582): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045783.626:22583): dev=qg-00c955c6-80 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045783.626:22583): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045783.626:22583): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=SERVICE_START msg=audit(1538045786.567:22584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045786.568:22585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045786.571:22586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045786.589:22587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045791.819:22588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045791.819:22589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045791.821:22590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045791.835:22591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045791.948:22592): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045791.948:22592): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045791.948:22592): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045791.948:22592): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045791.948:22592): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045791.948:22592): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045791.948:22592): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045791.948:22592): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=30994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045791.948:22592): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538045792.211:22593): dev=qg-bef78cea-4a prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045792.211:22593): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045792.211:22593): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045792.621:22594): table=filter family=2 entries=56 >type=SYSCALL msg=audit(1538045792.621:22594): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1867510 items=0 ppid=470 pid=31115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045792.621:22594): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045792.650:22595): table=filter family=10 entries=33 >type=SYSCALL msg=audit(1538045792.650:22595): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=12b1bf0 items=0 ppid=470 pid=31119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045792.650:22595): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045792.792:22596): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045792.792:22596): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e827b0 items=0 ppid=8841 pid=31134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045792.792:22596): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045792.793:22597): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045792.793:22597): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e848a0 items=0 ppid=8841 pid=31134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045792.793:22597): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045792.794:22598): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045792.794:22598): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e85f60 items=0 ppid=8841 pid=31134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045792.794:22598): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045792.794:22599): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045792.794:22599): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e856b0 items=0 ppid=8841 pid=31134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045792.794:22599): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045792.858:22600): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538045792.858:22600): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=17faad0 items=0 ppid=8841 pid=31148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045792.858:22600): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045792.858:22601): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538045792.858:22601): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=17fbc50 items=0 ppid=8841 pid=31148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045792.858:22601): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045792.859:22602): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538045792.859:22602): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=17fbc50 items=0 ppid=8841 pid=31148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045792.859:22602): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045792.965:22603): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538045792.965:22603): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bd0a60 items=0 ppid=8841 pid=31152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045792.965:22603): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045793.064:22604): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538045793.064:22604): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=149cba0 items=0 ppid=8841 pid=31166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045793.064:22604): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045793.065:22605): table=mangle family=2 entries=37 >type=SYSCALL msg=audit(1538045793.065:22605): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=149eaf0 items=0 ppid=8841 pid=31166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045793.065:22605): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045793.065:22606): table=nat family=2 entries=26 >type=SYSCALL msg=audit(1538045793.065:22606): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=149eaf0 items=0 ppid=8841 pid=31166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045793.065:22606): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045793.894:22607): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045793.894:22607): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045793.894:22607): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045793.894:22607): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045793.894:22607): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045793.894:22607): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045793.894:22607): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045793.894:22607): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f36cd592578 a2=0 a3=7ffdecffd9b0 items=0 ppid=8830 pid=31171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045793.894:22607): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538045794.086:22608): dev=tapf9d9c84f-0b prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045794.086:22608): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045794.086:22608): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045794.276:22609): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045794.276:22609): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=24de640 items=0 ppid=8795 pid=31210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045794.276:22609): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045794.278:22610): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045794.278:22610): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=24e0d20 items=0 ppid=8795 pid=31210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045794.278:22610): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045794.279:22611): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045794.279:22611): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=24e1700 items=0 ppid=8795 pid=31210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045794.279:22611): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045794.279:22612): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045794.279:22612): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=24e0d20 items=0 ppid=8795 pid=31210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045794.279:22612): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045794.598:22613): table=filter family=2 entries=58 >type=SYSCALL msg=audit(1538045794.598:22613): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1ceee30 items=0 ppid=470 pid=31223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045794.598:22613): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045794.626:22614): table=filter family=10 entries=35 >type=SYSCALL msg=audit(1538045794.626:22614): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1f365e0 items=0 ppid=470 pid=31225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045794.626:22614): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045796.053:22615): pid=31239 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045796.053:22616): pid=31239 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045796.054:22617): pid=31239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045796.092:22618): pid=31239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045796.685:22619): pid=31239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045796.685:22620): pid=31239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045796.852:22621): pid=31250 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045796.852:22622): pid=31250 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045796.852:22623): pid=31250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045796.857:22624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045796.857:22625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045796.859:22626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045796.889:22627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_START msg=audit(1538045796.896:22628): pid=31250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045797.464:22629): pid=31250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045797.464:22630): pid=31250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045797.611:22631): pid=31268 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045797.612:22632): pid=31268 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045797.612:22633): pid=31268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045797.633:22634): pid=31268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045798.186:22635): pid=31268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045798.187:22636): pid=31268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045798.310:22637): pid=31279 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045798.311:22638): pid=31279 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045798.311:22639): pid=31279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045798.329:22640): pid=31279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045798.891:22641): pid=31279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045798.891:22642): pid=31279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045799.479:22643): dev=qr-b01a3fe1-d1 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045799.479:22643): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045799.479:22643): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045800.176:22644): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045800.176:22644): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=25eb050 items=0 ppid=8841 pid=31347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045800.176:22644): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045800.289:22645): table=filter family=2 entries=25 >type=SYSCALL msg=audit(1538045800.289:22645): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bf03e0 items=0 ppid=8841 pid=31351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045800.289:22645): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045800.289:22646): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538045800.289:22646): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=bf1980 items=0 ppid=8841 pid=31351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045800.289:22646): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045800.611:22647): table=filter family=2 entries=60 >type=SYSCALL msg=audit(1538045800.611:22647): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e00750 items=0 ppid=470 pid=31355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045800.611:22647): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045800.637:22648): table=filter family=10 entries=37 >type=SYSCALL msg=audit(1538045800.637:22648): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1c8cfd0 items=0 ppid=470 pid=31357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045800.637:22648): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045802.070:22649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045802.070:22650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045802.072:22651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045802.106:22652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045807.318:22653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045807.318:22654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045807.322:22655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045807.350:22656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045810.078:22657): dev=qvb817df4f7-76 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045810.078:22657): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffe067a0870 a2=0 a3=7ffe067a02a0 items=0 ppid=10687 pid=31449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045810.078:22657): proctitle=6970006C696E6B007365740071766238313764663466372D37360070726F6D697363006F6E >type=ANOM_PROMISCUOUS msg=audit(1538045810.119:22658): dev=qvo817df4f7-76 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045810.119:22658): arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffc63100480 a2=0 a3=7ffc630ffea0 items=0 ppid=10687 pid=31452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045810.119:22658): proctitle=6970006C696E6B007365740071766F38313764663466372D37360070726F6D697363006F6E >type=SERVICE_START msg=audit(1538045810.245:22659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045810.673:22660): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 vm-ctx=system_u:system_r:svirt_t:s0:c661,c924 img-ctx=system_u:object_r:svirt_image_t:s0:c661,c924 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1538045810.673:22661): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045810.695:22662): dev=tap817df4f7-76 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1538045810.695:22662): arch=c000003e syscall=16 success=yes exit=0 a0=53 a1=89a2 a2=7f20e4c7ff60 a3=53202d2033353a62 items=0 ppid=1 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=PROCTITLE msg=audit(1538045810.695:22662): proctitle="/usr/sbin/libvirtd" >type=VIRT_RESOURCE msg=audit(1538045810.765:22663): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 net=fa:16:3e:df:3b:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045810.766:22664): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 net=fa:16:3e:df:3b:53 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045810.775:22665): table=filter family=2 entries=62 >type=SYSCALL msg=audit(1538045810.775:22665): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e35850 items=0 ppid=470 pid=31522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045810.775:22665): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045810.776:22666): table=raw family=2 entries=9 >type=SYSCALL msg=audit(1538045810.776:22666): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=e23010 items=0 ppid=470 pid=31522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045810.776:22666): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045810.814:22667): table=filter family=10 entries=39 >type=SYSCALL msg=audit(1538045810.814:22667): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=87b4f0 items=0 ppid=470 pid=31529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045810.814:22667): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045810.814:22668): table=raw family=10 entries=9 >type=SYSCALL msg=audit(1538045810.814:22668): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=86e010 items=0 ppid=470 pid=31529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045810.814:22668): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=VIRT_RESOURCE msg=audit(1538045810.841:22669): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d24\x2dinstance\x2d00000017.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045810.841:22670): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d24\x2dinstance\x2d00000017.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045810.841:22671): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d24\x2dinstance\x2d00000017.scope/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045810.841:22672): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d24\x2dinstance\x2d00000017.scope/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045810.841:22673): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d24\x2dinstance\x2d00000017.scope/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045810.842:22674): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d24\x2dinstance\x2d00000017.scope/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045810.842:22675): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d24\x2dinstance\x2d00000017.scope/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045810.842:22676): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d24\x2dinstance\x2d00000017.scope/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045810.842:22677): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d24\x2dinstance\x2d00000017.scope/" class=path path="/dev/kvm" rdev=0A:E8 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045810.842:22678): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d24\x2dinstance\x2d00000017.scope/" class=path path="/dev/rtc" rdev=FC:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045810.843:22679): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2d24\x2dinstance\x2d00000017.scope/" class=path path="/dev/hpet" rdev=0A:E4 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045811.133:22680): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 old-disk="?" new-disk="/var/lib/nova/instances/e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4/disk" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045811.133:22681): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 old-net="?" new-net="fa:16:3e:df:3b:53" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045811.133:22682): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=chardev reason=start vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 old-chardev="?" new-chardev="/dev/pts/1" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045811.133:22683): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 old-mem=0 new-mem=65536 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1538045811.133:22684): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045811.133:22685): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 vm-pid=31528 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045812.569:22686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045812.569:22687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045812.571:22688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045812.609:22689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045817.818:22690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045817.818:22691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045817.820:22692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045817.835:22693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045821.239:22694): table=nat family=2 entries=27 >type=SYSCALL msg=audit(1538045821.239:22694): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a70e50 items=0 ppid=8841 pid=31617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045821.239:22694): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_STOP msg=audit(1538045821.412:22695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045821.557:22696): pid=31628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045821.557:22697): pid=31628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045821.558:22698): pid=31628 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=442 res=1 >type=USER_START msg=audit(1538045821.604:22699): pid=31628 uid=0 auid=163 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045821.605:22700): pid=31628 uid=0 auid=163 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045823.067:22701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045823.068:22702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045823.070:22703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045823.091:22704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRED_DISP msg=audit(1538045823.780:22705): pid=31628 uid=0 auid=163 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045823.785:22706): pid=31628 uid=0 auid=163 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1538045828.317:22707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045828.317:22708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045828.319:22709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045828.332:22710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045833.567:22711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045833.567:22712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045833.570:22713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045833.580:22714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045838.817:22715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045838.817:22716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045838.818:22717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045838.829:22718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045844.067:22719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045844.067:22720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045844.069:22721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045844.080:22722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045849.317:22723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045849.317:22724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045849.319:22725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045849.324:22726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045850.904:22727): dev=qr-b01a3fe1-d1 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045850.904:22727): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045850.904:22727): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=ANOM_PROMISCUOUS msg=audit(1538045851.065:22728): dev=qg-bef78cea-4a prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045851.065:22728): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045851.065:22728): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045852.634:22729): table=filter family=2 entries=92 >type=SYSCALL msg=audit(1538045852.634:22729): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2164aa0 items=0 ppid=470 pid=31798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045852.634:22729): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045852.658:22730): table=filter family=10 entries=68 >type=SYSCALL msg=audit(1538045852.658:22730): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=13d5430 items=0 ppid=470 pid=31800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045852.658:22730): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045854.569:22731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045854.569:22732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045854.571:22733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045854.592:22734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045855.698:22735): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045855.698:22735): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045855.698:22735): table=raw family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045855.698:22735): table=raw family=10 entries=0 >type=NETFILTER_CFG msg=audit(1538045855.698:22735): table=mangle family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045855.698:22735): table=nat family=2 entries=0 >type=NETFILTER_CFG msg=audit(1538045855.698:22735): table=mangle family=10 entries=0 >type=SYSCALL msg=audit(1538045855.698:22735): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=7f2597393578 a2=0 a3=7ffdddeedb80 items=0 ppid=32530 pid=31812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="privsep-helper" exe="/usr/bin/python2.7" subj=system_u:system_r:neutron_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045855.698:22735): proctitle=2F7573722F62696E2F707974686F6E32002F62696E2F707269767365702D68656C706572002D2D636F6E6669672D66696C65002F7573722F73686172652F6E657574726F6E2F6E657574726F6E2D646973742E636F6E66002D2D636F6E6669672D66696C65002F6574632F6E657574726F6E2F6E657574726F6E2E636F6E66 >type=ANOM_PROMISCUOUS msg=audit(1538045855.959:22736): dev=qr-b01a3fe1-d1 prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045855.959:22736): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045855.959:22736): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_ACCT msg=audit(1538045856.074:22737): pid=31825 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045856.075:22738): pid=31825 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045856.075:22739): pid=31825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045856.106:22740): pid=31825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045856.349:22741): dev=qg-bef78cea-4a prom=256 old_prom=0 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045856.349:22741): arch=c000003e syscall=46 success=yes exit=76 a0=19 a1=7fffcd80bfd0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045856.349:22741): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=USER_END msg=audit(1538045856.425:22742): pid=31825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045856.425:22743): pid=31825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045856.551:22744): pid=31898 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045856.552:22745): pid=31898 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045856.552:22746): pid=31898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045856.572:22747): pid=31898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045856.690:22748): table=filter family=2 entries=88 >type=SYSCALL msg=audit(1538045856.690:22748): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1404d70 items=0 ppid=470 pid=31910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045856.690:22748): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045856.719:22749): table=filter family=10 entries=64 >type=SYSCALL msg=audit(1538045856.719:22749): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=135d5c0 items=0 ppid=470 pid=31913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045856.719:22749): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045856.942:22750): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1538045856.942:22750): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=17427b0 items=0 ppid=8841 pid=31925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045856.942:22750): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045856.943:22751): pid=31898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045856.943:22752): pid=31898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045856.943:22753): table=mangle family=2 entries=6 >type=SYSCALL msg=audit(1538045856.943:22753): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=17448a0 items=0 ppid=8841 pid=31925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045856.943:22753): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045856.945:22754): table=nat family=2 entries=5 >type=SYSCALL msg=audit(1538045856.945:22754): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1746830 items=0 ppid=8841 pid=31925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045856.945:22754): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045856.945:22755): table=raw family=2 entries=3 >type=SYSCALL msg=audit(1538045856.945:22755): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1745f80 items=0 ppid=8841 pid=31925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045856.945:22755): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045857.007:22756): table=filter family=10 entries=4 >type=SYSCALL msg=audit(1538045857.007:22756): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1ed7ad0 items=0 ppid=8841 pid=31929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045857.007:22756): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045857.008:22757): table=mangle family=10 entries=6 >type=SYSCALL msg=audit(1538045857.008:22757): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1ed8c50 items=0 ppid=8841 pid=31929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045857.008:22757): proctitle=6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045857.008:22758): table=raw family=10 entries=3 >type=SYSCALL msg=audit(1538045857.008:22758): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1ed8c50 items=0 ppid=8841 pid=31929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045857.008:22758): proctitle=6970367461626C65732D726573746F7265002D6E >type=USER_ACCT msg=audit(1538045857.093:22759): pid=31927 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045857.094:22760): pid=31927 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045857.094:22761): pid=31927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045857.115:22762): pid=31927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045857.288:22763): table=filter family=2 entries=23 >type=SYSCALL msg=audit(1538045857.288:22763): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1831030 items=0 ppid=8841 pid=31940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045857.288:22763): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045857.288:22764): table=mangle family=2 entries=36 >type=SYSCALL msg=audit(1538045857.288:22764): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1832710 items=0 ppid=8841 pid=31940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045857.288:22764): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045857.388:22765): table=filter family=2 entries=24 >type=SYSCALL msg=audit(1538045857.388:22765): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d2dd80 items=0 ppid=8841 pid=31943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045857.388:22765): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045857.389:22766): table=mangle family=2 entries=38 >type=SYSCALL msg=audit(1538045857.389:22766): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d2fc80 items=0 ppid=8841 pid=31943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045857.389:22766): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045857.389:22767): table=nat family=2 entries=29 >type=SYSCALL msg=audit(1538045857.389:22767): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=d2fc80 items=0 ppid=8841 pid=31943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045857.389:22767): proctitle=69707461626C65732D726573746F7265002D6E >type=USER_END msg=audit(1538045857.562:22768): pid=31927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045857.562:22769): pid=31927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045857.729:22770): pid=31952 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045857.729:22771): pid=31952 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045857.730:22772): pid=31952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045857.743:22773): pid=31952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045858.344:22774): pid=31952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045858.344:22775): pid=31952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045859.818:22776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045859.818:22777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045859.821:22778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045859.850:22779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1538045861.318:22780): dev=tap817df4f7-76 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=SERVICE_START msg=audit(1538045861.392:22781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1538045861.690:22782): pid=2402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="instance-00000017" uuid=e1b3023e-f6fe-40d5-ac3e-4090d8a2d7a4 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1538045862.710:22783): table=filter family=2 entries=92 >type=SYSCALL msg=audit(1538045862.710:22783): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=aadaa0 items=0 ppid=470 pid=32062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045862.710:22783): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045862.710:22784): table=raw family=2 entries=12 >type=SYSCALL msg=audit(1538045862.710:22784): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=a9e230 items=0 ppid=470 pid=32062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045862.710:22784): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045862.736:22785): table=filter family=10 entries=68 >type=SYSCALL msg=audit(1538045862.736:22785): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=8b3430 items=0 ppid=470 pid=32065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045862.736:22785): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045862.736:22786): table=raw family=10 entries=12 >type=SYSCALL msg=audit(1538045862.736:22786): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=8a8590 items=0 ppid=470 pid=32065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045862.736:22786): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045863.066:22787): table=mangle family=2 entries=40 >type=SYSCALL msg=audit(1538045863.066:22787): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b211d0 items=0 ppid=8841 pid=32082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045863.066:22787): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045863.066:22788): table=nat family=2 entries=30 >type=SYSCALL msg=audit(1538045863.066:22788): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1b20c40 items=0 ppid=8841 pid=32082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045863.066:22788): proctitle=69707461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045865.072:22789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045865.072:22790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045865.076:22791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045865.107:22792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1538045870.317:22793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045870.317:22794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045870.320:22795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045870.337:22796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045870.662:22797): table=filter family=2 entries=62 >type=SYSCALL msg=audit(1538045870.662:22797): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=10ed040 items=0 ppid=470 pid=32134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045870.662:22797): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045870.686:22798): table=filter family=10 entries=39 >type=SYSCALL msg=audit(1538045870.686:22798): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=14d0990 items=0 ppid=470 pid=32136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045870.686:22798): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_STOP msg=audit(1538045872.407:22799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1538045873.021:22800): dev=qr-b01a3fe1-d1 prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045873.021:22800): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045873.021:22800): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045873.233:22801): table=filter family=2 entries=26 >type=SYSCALL msg=audit(1538045873.233:22801): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=c45fd0 items=0 ppid=8841 pid=32150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045873.233:22801): proctitle=69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045873.234:22802): table=mangle family=2 entries=39 >type=SYSCALL msg=audit(1538045873.234:22802): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=c46ff0 items=0 ppid=8841 pid=32150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045873.234:22802): proctitle=69707461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045874.781:22803): dev=tapf9d9c84f-0b prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045874.781:22803): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045874.781:22803): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=SERVICE_START msg=audit(1538045875.568:22804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045875.568:22805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045875.571:22806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045875.580:22807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=NETFILTER_CFG msg=audit(1538045876.666:22808): table=filter family=2 entries=60 >type=SYSCALL msg=audit(1538045876.666:22808): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=12f5720 items=0 ppid=470 pid=32168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045876.666:22808): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045876.689:22809): table=filter family=10 entries=37 >type=SYSCALL msg=audit(1538045876.689:22809): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=1653fa0 items=0 ppid=470 pid=32170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045876.689:22809): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=ANOM_PROMISCUOUS msg=audit(1538045877.075:22810): dev=qg-bef78cea-4a prom=0 old_prom=256 auid=4294967295 uid=988 gid=1001 ses=4294967295 >type=SYSCALL msg=audit(1538045877.075:22810): arch=c000003e syscall=46 success=yes exit=32 a0=19 a1=7fffcd80c1c0 a2=0 a3=40 items=0 ppid=1 pid=31393 auid=4294967295 uid=988 gid=1001 euid=988 suid=988 fsuid=988 egid=1001 sgid=1001 fsgid=1001 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045877.075:22810): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D >type=NETFILTER_CFG msg=audit(1538045878.657:22811): table=filter family=2 entries=58 >type=SYSCALL msg=audit(1538045878.657:22811): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=1162e00 items=0 ppid=470 pid=32186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045878.657:22811): proctitle=2F7362696E2F69707461626C65732D726573746F7265002D6E >type=NETFILTER_CFG msg=audit(1538045878.678:22812): table=filter family=10 entries=35 >type=SYSCALL msg=audit(1538045878.678:22812): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=29 a2=40 a3=26625b0 items=0 ppid=470 pid=32188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=PROCTITLE msg=audit(1538045878.678:22812): proctitle=2F7362696E2F6970367461626C65732D726573746F7265002D6E >type=SERVICE_START msg=audit(1538045880.810:22813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045880.810:22814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045880.813:22815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045880.821:22816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045881.809:22817): pid=32230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045881.810:22818): pid=32230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045881.811:22819): pid=32230 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=443 res=1 >type=USER_START msg=audit(1538045881.856:22820): pid=32230 uid=0 auid=163 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045881.857:22821): pid=32230 uid=0 auid=163 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045882.923:22822): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045882.924:22823): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045883.070:22824): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045883.070:22825): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045883.073:22826): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32246 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045883.098:22827): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045883.098:22828): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045883.109:22829): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045883.109:22830): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045883.111:22831): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32254 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045883.136:22832): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045883.136:22833): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045883.149:22834): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045883.149:22835): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045883.150:22836): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32266 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045883.187:22837): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045883.187:22838): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045883.198:22839): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045883.199:22840): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045883.200:22841): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32273 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045883.226:22842): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045883.226:22843): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045883.243:22844): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045883.243:22845): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045883.245:22846): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32282 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045884.110:22847): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045884.110:22848): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045884.209:22849): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045884.209:22850): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045884.210:22851): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32305 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045884.228:22852): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045884.229:22853): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045884.241:22854): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045884.241:22855): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045884.242:22856): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32313 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045884.265:22857): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045884.265:22858): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045884.280:22859): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045884.280:22860): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045884.282:22861): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32325 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045884.318:22862): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045884.318:22863): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045884.330:22864): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045884.330:22865): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045884.331:22866): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32332 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045884.359:22867): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045884.359:22868): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045884.373:22869): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045884.373:22870): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045884.375:22871): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32341 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045884.621:22872): pid=32230 uid=0 auid=163 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045884.625:22873): pid=32230 uid=0 auid=163 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045884.710:22874): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045884.710:22875): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045884.829:22876): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045884.829:22877): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045884.831:22878): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32361 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045884.850:22879): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045884.850:22880): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045884.861:22881): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045884.861:22882): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045884.863:22883): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32369 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045884.888:22884): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045884.888:22885): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045884.902:22886): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045884.902:22887): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045884.904:22888): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32381 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045884.940:22889): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045884.940:22890): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045884.952:22891): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045884.952:22892): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045884.953:22893): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32388 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045884.972:22894): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045884.972:22895): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045884.983:22896): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045884.983:22897): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045884.985:22898): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32397 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045885.234:22899): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045885.234:22900): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045885.249:22901): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045885.249:22902): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045885.250:22903): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32416 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045885.383:22904): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045885.383:22905): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045885.493:22906): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045885.493:22907): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045885.495:22908): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32424 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045885.518:22909): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045885.518:22910): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045885.531:22911): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045885.531:22912): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045885.533:22913): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32432 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045885.560:22914): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045885.560:22915): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045885.573:22916): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045885.574:22917): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045885.575:22918): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32444 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045885.610:22919): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045885.610:22920): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045885.622:22921): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045885.622:22922): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045885.624:22923): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32451 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045885.648:22924): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045885.648:22925): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045885.662:22926): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045885.662:22927): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045885.663:22928): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32460 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045885.941:22929): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045885.941:22930): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045885.957:22931): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045885.957:22932): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045885.958:22933): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32479 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045885.985:22934): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045885.985:22935): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538045886.067:22936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045886.067:22937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045886.069:22938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045886.099:22939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_LOGIN msg=audit(1538045891.096:22940): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045891.097:22941): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045891.099:22942): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32495 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045891.125:22943): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045891.126:22944): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045891.137:22945): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045891.137:22946): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045891.138:22947): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32503 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045891.168:22948): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045891.169:22949): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045891.184:22950): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045891.184:22951): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045891.185:22952): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32515 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045891.229:22953): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045891.230:22954): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045891.241:22955): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045891.241:22956): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045891.243:22957): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32522 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045891.271:22958): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045891.271:22959): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045891.283:22960): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045891.283:22961): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045891.286:22962): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=32532 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045891.318:22963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045891.318:22964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045891.321:22965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045891.331:22966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1538045891.360:22967): pid=32549 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045891.360:22968): pid=32549 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045891.361:22969): pid=32549 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045891.373:22970): pid=32549 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538045896.338:22971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045896.338:22972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1538045896.340:22973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045896.357:22974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045897.324:22975): pid=32549 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045897.325:22976): pid=32549 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045897.331:22977): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045897.332:22978): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045898.275:22979): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045898.275:22980): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045898.277:22981): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=383 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045898.309:22982): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045898.309:22983): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045898.318:22984): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045898.318:22985): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045898.320:22986): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=391 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045898.350:22987): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045898.351:22988): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045898.364:22989): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045898.364:22990): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045898.366:22991): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=403 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045898.406:22992): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045898.406:22993): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045898.418:22994): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045898.418:22995): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045898.420:22996): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=410 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045898.446:22997): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045898.446:22998): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045898.461:22999): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045898.461:23000): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045898.463:23001): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=419 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045898.518:23002): pid=432 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045898.519:23003): pid=432 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045898.520:23004): pid=432 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045898.524:23005): pid=432 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045899.627:23006): pid=432 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045899.627:23007): pid=432 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045899.631:23008): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045899.631:23009): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045899.853:23010): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045899.853:23011): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045899.854:23012): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=447 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045899.876:23013): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045899.876:23014): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045899.887:23015): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045899.887:23016): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045899.888:23017): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=455 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045899.917:23018): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045899.917:23019): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045899.931:23020): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045899.932:23021): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045899.933:23022): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=477 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045899.968:23023): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045899.968:23024): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045899.979:23025): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045899.979:23026): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045899.981:23027): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=485 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045900.006:23028): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045900.006:23029): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045900.019:23030): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045900.019:23031): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045900.021:23032): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=496 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045900.063:23033): pid=509 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045900.063:23034): pid=509 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045900.063:23035): pid=509 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045900.069:23036): pid=509 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045901.061:23037): pid=509 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045901.061:23038): pid=509 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045901.066:23039): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045901.066:23040): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045901.153:23041): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045901.153:23042): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045901.154:23043): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=519 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045901.180:23044): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045901.180:23045): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045901.191:23046): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045901.191:23047): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045901.193:23048): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=527 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045901.221:23049): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045901.221:23050): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045901.234:23051): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045901.234:23052): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045901.235:23053): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=539 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045901.270:23054): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045901.271:23055): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045901.282:23056): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045901.282:23057): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045901.283:23058): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=546 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045901.309:23059): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045901.309:23060): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045901.323:23061): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045901.323:23062): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045901.325:23063): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=555 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045901.373:23064): pid=568 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045901.373:23065): pid=568 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045901.374:23066): pid=568 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538045901.377:23067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045901.377:23068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045901.377:23069): pid=568 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1538045901.379:23070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045901.396:23071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1538045901.661:23072): pid=568 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045901.662:23073): pid=568 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045901.666:23074): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045901.666:23075): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045901.854:23076): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045901.854:23077): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045901.855:23078): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=580 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045901.878:23079): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045901.879:23080): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045901.891:23081): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045901.891:23082): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045901.892:23083): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=588 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045901.919:23084): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045901.920:23085): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045901.934:23086): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045901.934:23087): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045901.935:23088): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=600 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045901.970:23089): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045901.971:23090): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045901.983:23091): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045901.983:23092): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045901.985:23093): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=607 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045902.010:23094): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045902.010:23095): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045902.024:23096): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045902.024:23097): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045902.025:23098): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=616 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045902.076:23099): pid=629 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045902.076:23100): pid=629 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045902.076:23101): pid=629 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045902.082:23102): pid=629 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045902.349:23103): pid=629 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045902.349:23104): pid=629 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045902.354:23105): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045902.354:23106): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045902.443:23107): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045902.444:23108): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045902.445:23109): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=637 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045902.461:23110): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045902.461:23111): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045902.473:23112): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045902.473:23113): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045902.474:23114): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=645 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045902.499:23115): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045902.500:23116): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045902.513:23117): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045902.513:23118): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045902.515:23119): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=657 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045902.550:23120): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045902.550:23121): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045902.561:23122): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045902.561:23123): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045902.562:23124): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=664 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045902.586:23125): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045902.586:23126): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045902.597:23127): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045902.598:23128): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045902.600:23129): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=673 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045902.645:23130): pid=686 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045902.645:23131): pid=686 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045902.645:23132): pid=686 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045902.650:23133): pid=686 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045904.449:23134): pid=686 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045904.449:23135): pid=686 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045904.454:23136): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045904.454:23137): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045904.544:23138): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045904.544:23139): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045904.545:23140): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=700 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045904.571:23141): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045904.571:23142): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045904.582:23143): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045904.582:23144): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045904.584:23145): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=709 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045904.614:23146): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045904.614:23147): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045904.628:23148): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045904.628:23149): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045904.630:23150): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=721 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045904.668:23151): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045904.668:23152): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045904.679:23153): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045904.679:23154): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045904.681:23155): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=728 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045904.707:23156): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045904.707:23157): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045904.719:23158): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045904.720:23159): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045904.721:23160): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=737 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045904.778:23161): pid=750 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045904.778:23162): pid=750 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045904.779:23163): pid=750 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045904.785:23164): pid=750 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045905.016:23165): pid=750 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045905.017:23166): pid=750 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045905.021:23167): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045905.021:23168): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045905.109:23169): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045905.110:23170): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045905.111:23171): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=759 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045905.138:23172): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045905.138:23173): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045905.148:23174): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045905.148:23175): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045905.150:23176): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=767 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045905.179:23177): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045905.179:23178): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045905.192:23179): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045905.192:23180): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045905.193:23181): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=779 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045905.228:23182): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045905.228:23183): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045905.240:23184): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045905.240:23185): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045905.242:23186): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=786 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045905.267:23187): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045905.267:23188): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045905.280:23189): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045905.281:23190): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045905.282:23191): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=795 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045905.336:23192): pid=808 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045905.336:23193): pid=808 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78677064767376646F6D786E79716A6A6B766E6C7770786469646562716562643B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034353930352E31312D3139303238303038343032373739322F636F6D6D616E642E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034353930352E31312D3139303238303038343032373739322F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045905.337:23194): pid=808 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045905.341:23195): pid=808 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045905.717:23196): pid=808 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045905.717:23197): pid=808 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045905.720:23198): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045905.720:23199): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045906.437:23200): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045906.438:23201): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045906.439:23202): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=821 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045906.463:23203): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045906.463:23204): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045906.475:23205): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045906.476:23206): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045906.477:23207): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=829 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045906.501:23208): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045906.501:23209): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045906.514:23210): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045906.514:23211): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045906.516:23212): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=841 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045906.554:23213): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045906.554:23214): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538045906.567:23215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1538045906.567:23216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_LOGIN msg=audit(1538045906.568:23217): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045906.568:23218): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=SERVICE_START msg=audit(1538045906.569:23219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1538045906.570:23220): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=849 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045906.596:23221): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045906.596:23222): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045906.607:23223): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045906.607:23224): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045906.609:23225): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=859 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045906.661:23226): pid=872 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045906.661:23227): pid=872 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045906.661:23228): pid=872 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045906.665:23229): pid=872 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045906.905:23230): pid=872 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045906.905:23231): pid=872 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045906.911:23232): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045906.911:23233): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045907.000:23234): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045907.000:23235): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045907.002:23236): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=901 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045907.022:23237): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045907.022:23238): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045907.033:23239): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045907.033:23240): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045907.035:23241): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=909 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045907.058:23242): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045907.058:23243): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045907.073:23244): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045907.073:23245): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045907.074:23246): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=921 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045907.104:23247): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045907.104:23248): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045907.117:23249): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045907.117:23250): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045907.118:23251): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=928 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045907.140:23252): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045907.140:23253): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045907.153:23254): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045907.153:23255): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045907.155:23256): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=937 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045907.199:23257): pid=950 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045907.200:23258): pid=950 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045907.200:23259): pid=950 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045907.205:23260): pid=950 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1538045916.066:23261): pid=1018 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045916.067:23262): pid=1018 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045916.067:23263): pid=1018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045916.099:23264): pid=1018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045916.668:23265): pid=1018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045916.668:23266): pid=1018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045916.804:23267): pid=1027 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045916.804:23268): pid=1027 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045916.804:23269): pid=1027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045916.826:23270): pid=1027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045917.377:23271): pid=1027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045917.378:23272): pid=1027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045917.512:23273): pid=1035 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045917.512:23274): pid=1035 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2073697A652C646174615F70657263656E74202D2D736570617261746F72203A202D2D6E6F737566666978202F6465762F63696E6465722D766F6C756D65732F63696E6465722D766F6C756D65732D706F6F6C terminal=? res=success' >type=CRED_REFR msg=audit(1538045917.513:23275): pid=1035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045917.525:23276): pid=1035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045917.947:23277): pid=1035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045917.947:23278): pid=1035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045918.083:23279): pid=1046 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cinder" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1538045918.083:23280): pid=1046 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D43206C7673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A65202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' >type=CRED_REFR msg=audit(1538045918.084:23281): pid=1046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1538045918.103:23282): pid=1046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045918.654:23283): pid=1046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1538045918.654:23284): pid=1046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cinder_volume_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045930.536:23285): pid=950 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045930.536:23286): pid=950 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045930.542:23287): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045930.542:23288): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045930.863:23289): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045930.863:23290): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045930.867:23291): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1075 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045930.890:23292): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045930.890:23293): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045930.900:23294): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045930.901:23295): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045930.902:23296): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1084 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045930.946:23297): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045930.946:23298): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045930.960:23299): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045930.960:23300): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045930.962:23301): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1096 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045931.000:23302): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045931.000:23303): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045931.011:23304): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045931.012:23305): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045931.013:23306): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1103 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045931.039:23307): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045931.039:23308): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045931.057:23309): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045931.057:23310): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045931.058:23311): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1112 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045931.119:23312): pid=1125 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045931.120:23313): pid=1125 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045931.121:23314): pid=1125 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045931.131:23315): pid=1125 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045931.661:23316): pid=1125 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045931.661:23317): pid=1125 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045931.666:23318): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045931.666:23319): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045931.753:23320): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045931.753:23321): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045931.755:23322): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1135 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045931.781:23323): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045931.781:23324): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045931.792:23325): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045931.793:23326): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045931.794:23327): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1143 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045931.824:23328): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045931.825:23329): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045931.838:23330): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045931.838:23331): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045931.840:23332): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1155 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045931.878:23333): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045931.879:23334): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045931.890:23335): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045931.890:23336): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045931.892:23337): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1162 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045931.920:23338): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045931.920:23339): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045931.934:23340): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045931.934:23341): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045931.936:23342): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1171 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045931.995:23343): pid=1184 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045931.995:23344): pid=1184 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045931.995:23345): pid=1184 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045932.008:23346): pid=1184 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045932.454:23347): pid=1184 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045932.454:23348): pid=1184 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045932.460:23349): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045932.460:23350): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045932.548:23351): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045932.548:23352): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045932.550:23353): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1193 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045932.575:23354): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045932.575:23355): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045932.585:23356): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045932.585:23357): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045932.587:23358): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1201 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045932.616:23359): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045932.616:23360): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045932.629:23361): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045932.629:23362): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045932.631:23363): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1213 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045932.668:23364): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045932.668:23365): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045932.679:23366): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045932.679:23367): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045932.680:23368): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1220 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045932.706:23369): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045932.707:23370): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045932.719:23371): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045932.720:23372): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045932.721:23373): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1229 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045932.776:23374): pid=1242 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045932.776:23375): pid=1242 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045932.776:23376): pid=1242 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045932.790:23377): pid=1242 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045933.209:23378): pid=1242 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045933.209:23379): pid=1242 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045933.213:23380): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045933.213:23381): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045933.302:23382): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045933.302:23383): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045933.303:23384): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1252 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045933.329:23385): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045933.329:23386): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045933.340:23387): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045933.340:23388): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045933.342:23389): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1260 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045933.371:23390): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045933.371:23391): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045933.386:23392): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045933.386:23393): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045933.387:23394): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1272 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045933.425:23395): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045933.425:23396): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045933.436:23397): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045933.436:23398): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045933.438:23399): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1279 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045933.464:23400): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045933.464:23401): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045933.476:23402): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045933.477:23403): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045933.478:23404): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1288 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045933.535:23405): pid=1301 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045933.536:23406): pid=1301 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63616E756167627568636B6177636763786675637462676E6C737979706D776F3B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034353933332E332D3132303430343534383938313632372F636F6D6D616E642E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034353933332E332D3132303430343534383938313632372F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045933.536:23407): pid=1301 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045933.539:23408): pid=1301 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045933.973:23409): pid=1301 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045933.974:23410): pid=1301 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045933.978:23411): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045933.978:23412): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045934.069:23413): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045934.069:23414): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045934.071:23415): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1311 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045934.097:23416): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045934.097:23417): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045934.108:23418): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045934.108:23419): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045934.110:23420): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1319 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045934.137:23421): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045934.137:23422): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045934.150:23423): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045934.150:23424): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045934.151:23425): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1331 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045934.190:23426): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045934.190:23427): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045934.201:23428): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045934.202:23429): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045934.203:23430): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1338 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045934.229:23431): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045934.229:23432): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045934.241:23433): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045934.241:23434): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045934.243:23435): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1347 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045934.298:23436): pid=1360 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045934.299:23437): pid=1360 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78797A77696B786262746374787361797A726671796F6F6C676F656B686A75743B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034353933342E30372D36353135383636313934363431362F636F6D6D616E642E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034353933342E30372D36353135383636313934363431362F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045934.300:23438): pid=1360 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045934.302:23439): pid=1360 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045934.811:23440): pid=1360 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045934.811:23441): pid=1360 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045934.817:23442): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045934.818:23443): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045934.906:23444): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045934.906:23445): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045934.907:23446): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1369 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045934.935:23447): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045934.935:23448): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045934.945:23449): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045934.946:23450): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045934.947:23451): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1377 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045934.978:23452): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045934.978:23453): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045934.991:23454): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045934.991:23455): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045934.992:23456): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1389 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045935.030:23457): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045935.030:23458): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045935.041:23459): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045935.042:23460): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045935.043:23461): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1396 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045935.072:23462): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045935.073:23463): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045935.088:23464): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045935.088:23465): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045935.089:23466): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1406 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045935.149:23467): pid=1420 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045935.150:23468): pid=1420 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626A7764776B777361656D69796363626E74746678666B61776D746D6974666F3B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034353933342E392D3235353536343939363031303230342F636F6D6D616E642E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034353933342E392D3235353536343939363031303230342F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045935.150:23469): pid=1420 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045935.155:23470): pid=1420 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045935.528:23471): pid=1420 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045935.528:23472): pid=1420 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045935.532:23473): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045935.532:23474): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045935.619:23475): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045935.619:23476): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045935.621:23477): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1430 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045935.645:23478): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045935.646:23479): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045935.657:23480): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045935.657:23481): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045935.658:23482): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1438 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045935.687:23483): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045935.687:23484): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045935.701:23485): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045935.701:23486): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045935.702:23487): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1450 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045935.742:23488): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045935.742:23489): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045935.754:23490): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045935.754:23491): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045935.755:23492): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1457 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045935.782:23493): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045935.783:23494): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045935.795:23495): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045935.795:23496): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045935.797:23497): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1466 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045935.856:23498): pid=1479 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045935.856:23499): pid=1479 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045935.857:23500): pid=1479 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045935.862:23501): pid=1479 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045936.262:23502): pid=1479 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045936.262:23503): pid=1479 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045936.267:23504): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045936.267:23505): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045936.358:23506): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045936.358:23507): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045936.359:23508): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1489 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045936.385:23509): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045936.386:23510): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045936.397:23511): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045936.397:23512): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045936.398:23513): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1497 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045936.428:23514): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045936.428:23515): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045936.441:23516): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045936.441:23517): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045936.443:23518): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1509 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045936.505:23519): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045936.506:23520): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045936.517:23521): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045936.517:23522): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045936.518:23523): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1516 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045936.590:23524): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045936.590:23525): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045936.602:23526): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045936.603:23527): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045936.604:23528): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1527 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045936.658:23529): pid=1542 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045936.658:23530): pid=1542 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045936.659:23531): pid=1542 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045936.664:23532): pid=1542 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045937.099:23533): pid=1542 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045937.099:23534): pid=1542 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045937.105:23535): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045937.105:23536): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045937.196:23537): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045937.196:23538): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045937.198:23539): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1552 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045937.223:23540): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045937.223:23541): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045937.258:23542): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045937.258:23543): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045937.260:23544): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1560 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045937.290:23545): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045937.290:23546): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045937.303:23547): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045937.303:23548): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045937.305:23549): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1572 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045937.370:23550): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045937.371:23551): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045937.382:23552): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045937.382:23553): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045937.384:23554): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1579 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045937.408:23555): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045937.408:23556): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045937.420:23557): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045937.420:23558): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045937.422:23559): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1588 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045937.469:23560): pid=1601 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045937.469:23561): pid=1601 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045937.469:23562): pid=1601 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045937.474:23563): pid=1601 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045941.076:23564): pid=1601 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045941.076:23565): pid=1601 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045941.080:23566): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045941.080:23567): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045941.170:23568): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045941.170:23569): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045941.172:23570): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1626 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045941.191:23571): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045941.191:23572): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045941.202:23573): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045941.202:23574): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045941.204:23575): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1642 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045941.223:23576): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045941.223:23577): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045941.236:23578): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045941.236:23579): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045941.237:23580): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1654 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045941.269:23581): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045941.269:23582): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045941.280:23583): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045941.281:23584): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045941.282:23585): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1661 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045941.303:23586): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045941.303:23587): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045941.316:23588): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045941.317:23589): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045941.319:23590): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1670 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045941.365:23591): pid=1683 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045941.365:23592): pid=1683 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045941.365:23593): pid=1683 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045941.373:23594): pid=1683 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1538045941.648:23595): pid=1688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1538045941.648:23596): pid=1688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1538045941.649:23597): pid=1688 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=163 tty=(none) old-ses=4294967295 ses=444 res=1 >type=USER_START msg=audit(1538045941.697:23598): pid=1688 uid=0 auid=163 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1538045941.699:23599): pid=1688 uid=0 auid=163 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1538045941.706:23600): pid=1683 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045941.707:23601): pid=1683 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045941.712:23602): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045941.713:23603): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045941.803:23604): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045941.803:23605): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045941.805:23606): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1704 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045941.829:23607): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045941.829:23608): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045941.840:23609): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045941.840:23610): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045941.841:23611): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1712 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045941.870:23612): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045941.870:23613): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045941.883:23614): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045941.883:23615): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045941.884:23616): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1726 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045941.922:23617): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045941.922:23618): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045941.933:23619): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045941.933:23620): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045941.934:23621): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1733 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045941.957:23622): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045941.957:23623): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045941.972:23624): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045941.972:23625): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045941.973:23626): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1742 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045942.020:23627): pid=1755 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045942.020:23628): pid=1755 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045942.021:23629): pid=1755 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045942.025:23630): pid=1755 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045942.165:23631): pid=1755 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045942.165:23632): pid=1755 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045942.170:23633): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045942.170:23634): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045942.256:23635): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045942.256:23636): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045942.258:23637): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1763 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045942.283:23638): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045942.283:23639): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045942.295:23640): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045942.295:23641): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045942.297:23642): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1771 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045942.326:23643): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045942.327:23644): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045942.341:23645): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045942.341:23646): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045942.343:23647): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1784 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045942.381:23648): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045942.381:23649): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045942.396:23650): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045942.396:23651): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045942.397:23652): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1793 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045942.638:23653): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045942.638:23654): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045942.651:23655): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045942.651:23656): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045942.653:23657): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1802 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045942.699:23658): pid=1817 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045942.699:23659): pid=1817 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045942.699:23660): pid=1817 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045942.701:23661): pid=1817 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045943.034:23662): pid=1817 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045943.034:23663): pid=1817 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045943.040:23664): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045943.040:23665): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045943.128:23666): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045943.128:23667): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045943.131:23668): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1867 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045943.148:23669): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045943.148:23670): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045943.159:23671): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045943.159:23672): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045943.161:23673): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1875 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045943.185:23674): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045943.185:23675): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045943.198:23676): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045943.198:23677): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045943.200:23678): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1887 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045943.234:23679): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045943.234:23680): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045943.245:23681): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045943.245:23682): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045943.247:23683): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1894 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045943.272:23684): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045943.272:23685): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045943.287:23686): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045943.287:23687): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045943.288:23688): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1903 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045943.342:23689): pid=1916 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045943.342:23690): pid=1916 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045943.342:23691): pid=1916 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045943.360:23692): pid=1916 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045943.672:23693): pid=1916 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045943.672:23694): pid=1916 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045943.677:23695): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045943.677:23696): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045943.766:23697): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045943.766:23698): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045943.767:23699): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1926 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045943.787:23700): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRED_DISP msg=audit(1538045943.787:23702): pid=1688 uid=0 auid=163 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_LOGOUT msg=audit(1538045943.787:23701): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_END msg=audit(1538045943.792:23703): pid=1688 uid=0 auid=163 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="keystone" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_LOGIN msg=audit(1538045943.799:23704): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045943.799:23705): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045943.802:23706): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1936 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045943.823:23707): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045943.823:23708): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045943.836:23709): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045943.836:23710): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045943.838:23711): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1948 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045943.862:23712): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045943.862:23713): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045943.873:23714): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045943.873:23715): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045943.874:23716): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1955 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045943.893:23717): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045943.893:23718): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045943.905:23719): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045943.905:23720): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045943.907:23721): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1964 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045943.950:23722): pid=1977 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045943.950:23723): pid=1977 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045943.950:23724): pid=1977 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045943.958:23725): pid=1977 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045944.103:23726): pid=1977 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045944.103:23727): pid=1977 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045944.106:23728): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045944.106:23729): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045944.221:23730): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045944.221:23731): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045944.222:23732): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1985 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045944.239:23733): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045944.239:23734): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045944.249:23735): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045944.249:23736): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045944.251:23737): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=1993 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045944.270:23738): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045944.270:23739): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045944.283:23740): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045944.283:23741): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045944.284:23742): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2005 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045944.319:23743): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045944.319:23744): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045944.331:23745): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045944.331:23746): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045944.332:23747): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2012 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045944.357:23748): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045944.357:23749): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045944.370:23750): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045944.370:23751): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045944.371:23752): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2021 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045944.414:23753): pid=2034 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045944.414:23754): pid=2034 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045944.414:23755): pid=2034 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045944.416:23756): pid=2034 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045944.613:23757): pid=2034 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045944.613:23758): pid=2034 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045944.616:23759): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045944.616:23760): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045944.703:23761): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045944.703:23762): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045944.705:23763): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2045 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045944.726:23764): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045944.726:23765): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045944.737:23766): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045944.737:23767): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045944.738:23768): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2053 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045944.760:23769): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045944.760:23770): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045944.775:23771): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045944.775:23772): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045944.777:23773): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2065 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045944.804:23774): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045944.804:23775): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045944.815:23776): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045944.816:23777): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045944.817:23778): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2072 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045944.832:23779): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045944.833:23780): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045944.845:23781): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045944.845:23782): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045944.847:23783): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2082 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045944.876:23784): pid=2095 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045944.877:23785): pid=2095 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045944.877:23786): pid=2095 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045944.880:23787): pid=2095 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045945.086:23788): pid=2095 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045945.086:23789): pid=2095 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045945.089:23790): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045945.089:23791): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045945.177:23792): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045945.178:23793): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045945.179:23794): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2105 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045945.193:23795): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045945.194:23796): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045945.204:23797): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045945.204:23798): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045945.205:23799): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2115 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045945.221:23800): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045945.221:23801): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045945.233:23802): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045945.233:23803): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045945.234:23804): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2127 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045945.876:23805): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045945.877:23806): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045945.888:23807): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045945.888:23808): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045945.889:23809): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2135 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045945.909:23810): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045945.909:23811): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045945.921:23812): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045945.921:23813): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045945.922:23814): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2144 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045945.959:23815): pid=2157 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045945.959:23816): pid=2157 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045945.960:23817): pid=2157 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045945.962:23818): pid=2157 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045946.115:23819): pid=2157 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045946.115:23820): pid=2157 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045946.118:23821): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045946.118:23822): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045946.251:23823): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045946.251:23824): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045946.252:23825): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2167 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045946.269:23826): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045946.269:23827): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045946.280:23828): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045946.280:23829): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045946.281:23830): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2175 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045946.301:23831): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045946.301:23832): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045946.315:23833): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045946.315:23834): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045946.316:23835): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2187 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045946.347:23836): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045946.347:23837): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045946.358:23838): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045946.358:23839): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045946.359:23840): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2194 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045946.376:23841): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045946.376:23842): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045946.388:23843): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045946.388:23844): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045946.390:23845): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2204 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045946.422:23846): pid=2218 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045946.423:23847): pid=2218 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045946.423:23848): pid=2218 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045946.426:23849): pid=2218 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045946.625:23850): pid=2218 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045946.625:23851): pid=2218 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045946.629:23852): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045946.629:23853): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045946.717:23854): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045946.717:23855): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045946.718:23856): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2226 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045947.180:23857): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045947.180:23858): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045947.180:23859): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045947.180:23860): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045947.182:23861): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2236 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045947.210:23862): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045947.210:23863): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045947.224:23864): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045947.225:23865): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045947.226:23866): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2248 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045947.263:23867): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045947.263:23868): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045947.275:23869): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045947.275:23870): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045947.277:23871): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2256 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045947.301:23872): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045947.301:23873): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045947.314:23874): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045947.314:23875): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045947.316:23876): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2265 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045947.366:23877): pid=2278 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045947.367:23878): pid=2278 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045947.367:23879): pid=2278 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045947.370:23880): pid=2278 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045947.705:23881): pid=2278 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045947.705:23882): pid=2278 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045947.708:23883): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045947.708:23884): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045947.950:23885): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045947.950:23886): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045947.952:23887): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2285 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045947.972:23888): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045947.972:23889): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045947.983:23890): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045947.983:23891): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045947.984:23892): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2295 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045948.008:23893): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045948.008:23894): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045948.022:23895): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045948.022:23896): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045948.024:23897): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2307 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045948.054:23898): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045948.054:23899): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045948.066:23900): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045948.066:23901): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045948.067:23902): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2315 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045948.087:23903): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045948.087:23904): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045948.099:23905): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045948.099:23906): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045948.101:23907): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2324 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045948.148:23908): pid=2337 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045948.149:23909): pid=2337 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045948.149:23910): pid=2337 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045948.152:23911): pid=2337 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1538045948.541:23912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dstat comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045948.571:23913): pid=2337 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045948.572:23914): pid=2337 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045948.577:23915): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045948.577:23916): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045949.305:23917): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045949.305:23918): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045949.307:23919): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2347 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045949.328:23920): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045949.329:23921): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045949.339:23922): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045949.339:23923): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045949.340:23924): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2357 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045949.365:23925): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045949.365:23926): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045949.380:23927): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045949.380:23928): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045949.381:23929): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2370 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045949.416:23930): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045949.416:23931): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045949.428:23932): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045949.428:23933): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045949.429:23934): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2378 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045949.455:23935): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045949.455:23936): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045949.470:23937): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045949.470:23938): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045949.471:23939): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2387 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045949.527:23940): pid=2424 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045949.528:23941): pid=2424 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045949.528:23942): pid=2424 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045949.532:23943): pid=2424 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045956.509:23944): pid=2424 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045956.509:23945): pid=2424 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045956.515:23946): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045956.515:23947): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045956.606:23948): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045956.606:23949): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045956.608:23950): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2476 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045956.626:23951): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045956.626:23952): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045956.638:23953): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045956.638:23954): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045956.639:23955): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2484 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045956.666:23956): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045956.666:23957): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045956.679:23958): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045956.679:23959): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045956.680:23960): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2496 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045956.717:23961): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045956.717:23962): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045956.730:23963): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045956.730:23964): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045956.732:23965): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2505 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045956.752:23966): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045956.752:23967): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045956.766:23968): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045956.766:23969): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045956.768:23970): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2515 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045956.822:23971): pid=2529 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045956.823:23972): pid=2529 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045956.823:23973): pid=2529 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045956.829:23974): pid=2529 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045957.136:23975): pid=2529 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045957.136:23976): pid=2529 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045957.141:23977): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045957.141:23978): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045957.304:23979): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045957.304:23980): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045957.306:23981): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2541 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045957.330:23982): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045957.330:23983): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045957.341:23984): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045957.341:23985): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045957.342:23986): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2549 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045957.369:23987): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045957.370:23988): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045957.383:23989): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045957.383:23990): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045957.385:23991): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2561 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045957.416:23992): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045957.417:23993): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045957.428:23994): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045957.428:23995): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045957.430:23996): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2568 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045957.448:23997): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045957.448:23998): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045957.460:23999): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045957.460:24000): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045957.461:24001): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2577 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045957.507:24002): pid=2590 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045957.507:24003): pid=2590 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707A7864667575617A6367636468797775696D7A6D7665756263687A756878753B202F7573722F62696E2F707974686F6E202F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034353935372E332D3137363635353733353837313930322F636F6D6D616E642E70793B20726D202D726620222F686F6D652F636C6F75642D757365722F2E616E7369626C652F746D702F616E7369626C652D746D702D313533383034353935372E332D3137363635353733353837313930322F22203E202F6465762F6E756C6C20323E2631 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045957.507:24004): pid=2590 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045957.511:24005): pid=2590 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045957.885:24006): pid=2590 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045957.885:24007): pid=2590 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045957.889:24008): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045957.890:24009): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045958.055:24010): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045958.056:24011): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045958.057:24012): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2603 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045958.081:24013): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045958.081:24014): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045958.092:24015): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045958.092:24016): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045958.094:24017): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2614 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045958.123:24018): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045958.123:24019): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045958.136:24020): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045958.136:24021): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045958.138:24022): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2627 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045958.178:24023): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045958.178:24024): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045958.189:24025): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045958.189:24026): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045958.190:24027): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2634 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045958.217:24028): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045958.217:24029): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045958.231:24030): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045958.231:24031): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045958.232:24032): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2644 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045958.287:24033): pid=2657 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045958.287:24034): pid=2657 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045958.288:24035): pid=2657 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045958.290:24036): pid=2657 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045958.520:24037): pid=2657 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045958.520:24038): pid=2657 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045958.524:24039): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045958.525:24040): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045958.687:24041): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045958.687:24042): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045958.689:24043): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2668 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045958.712:24044): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045958.712:24045): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045958.724:24046): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045958.724:24047): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045958.725:24048): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2676 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045958.754:24049): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045958.754:24050): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045958.766:24051): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045958.766:24052): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045958.768:24053): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2688 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045958.802:24054): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045958.802:24055): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045958.816:24056): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045958.816:24057): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045958.817:24058): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2696 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045958.844:24059): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045958.844:24060): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045958.857:24061): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045958.857:24062): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045958.858:24063): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2705 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045958.901:24064): pid=2718 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045958.901:24065): pid=2718 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045958.902:24066): pid=2718 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045958.905:24067): pid=2718 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045959.270:24068): pid=2718 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1538045959.270:24069): pid=2718 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1538045959.274:24070): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1538045959.274:24071): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGIN msg=audit(1538045959.369:24072): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045959.370:24073): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045959.371:24074): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2726 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045959.396:24075): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045959.396:24076): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045959.406:24077): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045959.406:24078): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045959.408:24079): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2734 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045959.436:24080): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045959.436:24081): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045959.449:24082): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045959.449:24083): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045959.450:24084): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2746 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045959.487:24085): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045959.488:24086): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045959.498:24087): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_START msg=audit(1538045959.499:24088): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1538045959.500:24089): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2753 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1538045959.524:24090): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1538045959.524:24091): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1538045959.538:24092): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045959.538:24093): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=10.8.245.99 addr=10.8.245.99 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1538045959.539:24094): pid=11616 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7b:e1:a7:c1:98:31:d7:04:57:34:e0:38:db:cd:33:aa:2e:9b:5f:46:00:4b:31:39:b6:0b:20:b6:2c:31:a1:74 direction=? spid=2762 suid=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1538045959.593:24095): pid=2776 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="cloud-user" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1538045959.593:24096): pid=2776 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/cloud-user" cmd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terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1538045959.594:24097): pid=2776 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1538045959.599:24098): pid=2776 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=1487732">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 1630318
: 1487732